# changelog

author: Rhythm Mahajan <rhythm.m.mahajan@oracle.com> [6.9.0-2.20240531.el9uek]
changelog:
  - uek-rpm: add libie.ko + dimlib.ko to ol8/core-emb3-aarch64.list (Vegard Nossum)   
  - ml-rpm: Add few modules to core for build ML kernel (Harshit Mogalapalli)   
  - uek-rpm: enable CONFIG_SCHED_CLASS_EXT (sched_ext) (Vegard Nossum)   
  - scx: Fix typos (I Hsin Cheng)   
  - scx: Sync from the SCx repo (Tejun Heo)   
  - scx: Close a small race window in the enable path which can lead to use-after-free (Tejun Heo)   
  - scx/common.bpf.h: Sync from SCX repo (Tejun Heo)   
  - scx: Allocate scx_dsp_ctx together with scx_dsp_buf (From: Tejun Heo)   
  - scx: Replace scx_cpu_online percpu var with SCX_RQ_ONLINE flag (Tejun Heo)   
  - scx: Always use rq->scx instead of scx_rq (Tejun Heo)   
  - net: revert partially applied PHY topology series (Jakub Kicinski)   
  - net: stmmac: move the EST structure to struct stmmac_priv (Xiaolei Wang)   
  - net: stmmac: move the EST lock to struct stmmac_priv (Xiaolei Wang)   
  - mptcp: include inet_common in mib.h (Matthieu Baerts (NGI0))   
  - mptcp: move mptcp_pm_gen.h's include (Matthieu Baerts (NGI0))   
  - mptcp: remove unnecessary else statements (Matthieu Baerts (NGI0))   
  - mptcp: prefer strscpy over strcpy (Matthieu Baerts (NGI0))   
  - mptcp: add net.mptcp.available_schedulers (Gregory Detal)   
  - mptcp: sockopt: info: stop early if no buffer (Matthieu Baerts (NGI0))   
  - mptcp: fix full TCP keep-alive support (Matthieu Baerts (NGI0))   
  - mptcp: SO_KEEPALIVE: fix getsockopt support (Matthieu Baerts (NGI0))   
  - net: mana: Enable MANA driver on ARM64 with 4K page size (Haiyang Zhang)   
  - net: prestera: Add flex arrays to some structs (Erick Archer)   
  - tcp: rstreason: fully support in tcp_check_req() (Jason Xing)   
  - tcp: rstreason: handle timewait cases in the receive path (Jason Xing)   
  - tcp: rstreason: fully support in tcp_rcv_state_process() (Jason Xing)   
  - tcp: rstreason: fully support in tcp_ack() (Jason Xing)   
  - tcp: rstreason: fully support in tcp_rcv_synsent_state_process() (Jason Xing)   
  - net: stmmac: add support for RZ/N1 GMAC (Clément Léger)   
  - net: stmmac: dwmac-socfpga: use pcs_init/pcs_exit (Russell King (Oracle))   
  - net: stmmac: introduce pcs_init/pcs_exit stmmac operations (Russell King (Oracle))   
  - net: stmmac: Make stmmac_xpcs_setup() generic to all PCS devices (Serge Semin)   
  - net: stmmac: Add dedicated XPCS cleanup method (Serge Semin)   
  - dt-bindings: net: renesas,rzn1-gmac: Document RZ/N1 GMAC support (Clément Léger)   
  - net: qede: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - virtio_net: remove the misleading comment (Xuan Zhuo)   
  - virtio_net: rx remove premapped failover code (Xuan Zhuo)   
  - virtio_net: big mode skip the unmap check (Xuan Zhuo)   
  - virtio_ring: enable premapped mode whatever use_dma_api (Xuan Zhuo)   
  - net: pcs: lynx: no need to read LPA in lynx_pcs_get_state_2500basex() (Vladimir Oltean)   
  - net/mlx5: Remove unused msix related exported APIs (Parav Pandit)   
  - net/mlx5e: Modifying channels number and updating TX queues (Carolina Jubran)   
  - net/mlx5: Enable 8 ports LAG (Shay Drory)   
  - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Lukasz Majewski)   
  - net: dsa: microchip: dcb: set default apptrust to PCP only (Oleksij Rempel)   
  - net: dsa: microchip: dcb: add comments for DSCP related functions (Oleksij Rempel)   
  - net: dsa: microchip: dcb: rename IPV to IPM (Oleksij Rempel)   
  - l2tp: Support different protocol versions with same IP/port quadruple (Samuel Thibault)   
  - ynl: ensure exact-len value is resolved (Antonio Quartulli)   
  - virtio_net: Add TX stopped and wake counters (Daniel Jurgens)   
  - netdev: Add queue stats for TX stop and wake (Daniel Jurgens)   
  - tcp: socket option to check for MPTCP fallback to TCP (Matthieu Baerts (NGI0))   
  - selftests/net: add flush id selftests (Richard Gobert)   
  - net: gro: move L3 flush checks to tcp_gro_receive and udp_gro_receive_segment (Richard Gobert)   
  - net: gro: use cb instead of skb->network_header (Richard Gobert)   
  - net: ena: Change initial rx_usec interval (David Arinzon)   
  - net: ena: Changes around strscpy calls (David Arinzon)   
  - net: ena: Add validation for completion descriptors consistency (David Arinzon)   
  - net: ena: Reduce holes in ena_com structures (David Arinzon)   
  - net: ena: Add a counter for driver's reset failures (David Arinzon)   
  - selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m (Florian Westphal)   
  - selftests: net: use upstream mtools (Vladimir Oltean)   
  - selftest: epoll_busy_poll: Fix spelling mistake "couldnt" -> "couldn't" (Colin Ian King)   
  - net: phy: air_en8811h: reset netdev rules when LED is set manually (Daniel Golle)   
  - bpf: make list_for_each_entry portable (Jose E. Marchesi)   
  - bpf: ignore expected GCC warning in test_global_func10.c (Jose E. Marchesi)   
  - bpf: disable strict aliasing in test_global_func9.c (Jose E. Marchesi)   
  - selftests/bpf: Free strdup memory in xdp_hw_metadata (Geliang Tang)   
  - selftests/bpf: Fix a few tests for GCC related warnings. (Cupertino Miranda)   
  - bpf: avoid gcc overflow warning in test_xdp_vlan.c (David Faust)   
  - tools: remove redundant ethtool.h from tooling infra (Tushar Vyavahare)   
  - selftests/bpf: Expand ATTACH_REJECT tests (Jordan Rife)   
  - selftests/bpf: Expand getsockname and getpeername tests (Jordan Rife)   
  - sefltests/bpf: Expand sockaddr hook deny tests (Jordan Rife)   
  - selftests/bpf: Expand sockaddr program return value tests (Jordan Rife)   
  - selftests/bpf: Retire test_sock_addr.(c|sh) (Jordan Rife)   
  - selftests/bpf: Remove redundant sendmsg test cases (Jordan Rife)   
  - selftests/bpf: Migrate ATTACH_REJECT test cases (Jordan Rife)   
  - selftests/bpf: Migrate expected_attach_type tests (Jordan Rife)   
  - selftests/bpf: Migrate wildcard destination rewrite test (Jordan Rife)   
  - selftests/bpf: Migrate sendmsg6 v4 mapped address tests (Jordan Rife)   
  - selftests/bpf: Migrate sendmsg deny test cases (Jordan Rife)   
  - selftests/bpf: Migrate WILDCARD_IP test (Jordan Rife)   
  - selftests/bpf: Handle SYSCALL_EPERM and SYSCALL_ENOTSUPP test cases (Jordan Rife)   
  - selftests/bpf: Handle ATTACH_REJECT test cases (Jordan Rife)   
  - selftests/bpf: Handle LOAD_REJECT test cases (Jordan Rife)   
  - selftests/bpf: Use program name for skel load/destroy functions (Jordan Rife)   
  - selftests/bpf: Migrate recvmsg* return code tests to verifier_sock_addr.c (Jordan Rife)   
  - riscv, bpf: make some atomic operations fully ordered (Puranjay Mohan)   
  - riscv, bpf: Fix typo in comment (Xiao Wang)   
  - s390/bpf: Emit a barrier for BPF_FETCH instructions (Ilya Leoshkevich)   
  - bpf, arm64: inline bpf_get_smp_processor_id() helper (Puranjay Mohan)   
  - arm64, bpf: add internal-only MOV instruction to resolve per-CPU addrs (Puranjay Mohan)   
  - riscv, bpf: inline bpf_get_smp_processor_id() (Puranjay Mohan)   
  - riscv, bpf: add internal-only MOV instruction to resolve per-CPU addrs (Puranjay Mohan)   
  - ARC: Add eBPF JIT support (Shahab Vahedi)   
  - net: qede: use extack in qede_parse_actions() (Asbjørn Sloth Tønnesen)   
  - net: qede: propagate extack through qede_flow_spec_validate() (Asbjørn Sloth Tønnesen)   
  - net: qede: use faked extack in qede_flow_spec_to_rule() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_parse_flow_attr() (Asbjørn Sloth Tønnesen)   
  - net: qede: add extack in qede_add_tc_flower_fltr() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_udp_v4() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_udp_v6() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_tcp_v4() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_tcp_v6() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_v4_common() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_v6_common() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_set_v4_tuple_to_profile() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_set_v6_tuple_to_profile() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_ports() (Asbjørn Sloth Tønnesen)   
  - net: usb: smsc95xx: stop lying about skb->truesize (Eric Dumazet)   
  - net: dsa: microchip: Fix spellig mistake "configur" -> "configure" (Colin Ian King)   
  - af_unix: Add dead flag to struct scm_fp_list. (Kuniyuki Iwashima)   
  - net: ethernet: adi: adin1110: Replace linux/gpio.h by proper one (Andy Shevchenko)   
  - octeontx2-pf: Reuse Transmit queue/Send queue index of HTB class (Hariprasad Kelam)   
  - gve: Use ethtool_sprintf/puts() to fill stats strings (Simon Horman)   
  - gve: Avoid unnecessary use of comma operator (Simon Horman)   
  - selftests: net: increase the delay for relative cmsg_time.sh test (Jakub Kicinski)   
  - selftests: net: fix timestamp not arriving in cmsg_time.sh (Jakub Kicinski)   
  - virtio_net: Fix memory leak in virtnet_rx_mod_work (Daniel Jurgens)   
  - bnxt_en: silence clang build warning (Vadim Fedorenko)   
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal)   
  - selftests: netfilter: add packetdrill based conntrack tests (Florian Westphal)   
  - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal)   
  - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal)   
  - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal)   
  - net: ipv6: fix wrong start position when receive hop-by-hop fragment (gaoxingwang)   
  - tcp: get rid of twsk_unique() (Eric Dumazet)   
  - net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju)   
  - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (Alan Maguire)   
  - selftests/bpf: Drop get_port in test_tcp_check_syncookie (Geliang Tang)   
  - selftests/bpf: Use connect_to_fd in test_tcp_check_syncookie (Geliang Tang)   
  - selftests/bpf: Use connect_to_fd in sockopt_inherit (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in test_tcp_check_syncookie (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in sockopt_inherit (Geliang Tang)   
  - selftests/bpf: Add post_socket_cb for network_helper_opts (Geliang Tang)   
  - scx: Include dsq_vtime in dump (Tejun Heo)   
  - scx: Trigger debug dump with sysrq-D (Tejun Heo)   
  - scx: Send dump output through a tracepoint too (Tejun Heo)   
  - scx: Fix short dump buf handling (Tejun Heo)   
  - scx: Implicitly output newline from dump_line() (Tejun Heo)   
  - scx: Assemble ops dump output into lines before calling dump_line() (Tejun Heo)   
  - scx: Refactor bstr_format() and make dump path use its own buffers (Tejun Heo)   
  - scx: Add dump_stack_trace() (Tejun Heo)   
  - scx: Add dump_line() (Tejun Heo)   
  - scx: Package dump related fields into struct scx_dump_data (Tejun Heo)   
  - scx: Use a global bstr formatting buffer instead of percpu (Tejun Heo)   
  - scx/compat.bpf.h: Add __COMPAT_scx_bpf_dump() and fix __COMPAT_scx_bpf_exit() (Tejun Heo)   
  - selftest: epoll_busy_poll: epoll busy poll tests (Joe Damato)   
  - selftests/bpf: Retire bpf_tcp_helpers.h (Martin KaFai Lau)   
  - selftests/bpf: Remove the bpf_tcp_helpers.h usages from other non tcp-cc tests (Martin KaFai Lau)   
  - selftests/bpf: Remove bpf_tcp_helpers.h usages from other misc bpf tcp-cc tests (Martin KaFai Lau)   
  - selftests/bpf: Use bpf_tracing_net.h in bpf_dctcp (Martin KaFai Lau)   
  - selftests/bpf: Use bpf_tracing_net.h in bpf_cubic (Martin KaFai Lau)   
  - selftests/bpf: Rename tcp-cc private struct in bpf_cubic and bpf_dctcp (Martin KaFai Lau)   
  - selftests/bpf: Sanitize the SEC and inline usages in the bpf-tcp-cc tests (Martin KaFai Lau)   
  - selftests/bpf: Reuse the tcp_sk() from the bpf_tracing_net.h (Martin KaFai Lau)   
  - selftests/bpf: Add a few tcp helper functions and macros to bpf_tracing_net.h (Martin KaFai Lau)   
  - selftests/bpf: Remove bpf_tracing_net.h usages from two networking tests (Martin KaFai Lau)   
  - l2tp: Support several sockets with same IP/port quadruple (Samuel Thibault)   
  - net: selftest: add test for netdev netlink queue-get API (David Wei)   
  - netdevsim: add NAPI support (David Wei)   
  - selftests: drv-net: add checksum tests (Willem de Bruijn)   
  - phonet: no longer hold RTNL in route_dumpit() (Eric Dumazet)   
  - net: annotate data-races around dev->if_port (Eric Dumazet)   
  - net: dst_cache: minor optimization in dst_cache_set_ip6() (Eric Dumazet)   
  - net: dst_cache: annotate data-races around dst_cache->reset_ts (Eric Dumazet)   
  - netlink/specs: Add VF attributes to rt_link spec (Donald Hunter)   
  - dt-bindings: net: ipq4019-mdio: add IPQ9574 compatible (Alexandru Gagniuc)   
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Jose E. Marchesi)   
  - bpf: guard BPF_NO_PRESERVE_ACCESS_INDEX in skb_pkt_end.c (Jose E. Marchesi)   
  - bpf: avoid UB in usages of the __imm_insn macro (Jose E. Marchesi)   
  - bpf: avoid uninitialized warnings in verifier_global_subprogs.c (Jose E. Marchesi)   
  - net: e1000e & ixgbe: Remove PCI_HEADER_TYPE_MFD duplicates (Ilpo Järvinen)   
  - igc: fix a log entry using uninitialized netdev (Corinna Vinschen)   
  - ice: remove correct filters during eswitch release (Michal Swiatkowski)   
  - igb: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - ice: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - iavf: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - i40e: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - bpf, arm64: Add support for lse atomics in bpf_arena (Puranjay Mohan)   
  - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Lukasz Majewski)   
  - ax25: Remove superfuous "return" from ax25_ds_set_timer (Joel Granados)   
  - ipvs: allow some sysctls in non-init user namespaces (Alexander Mikhalitsyn)   
  - ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh (Alexander Mikhalitsyn)   
  - net: stmmac: dwmac-ipq806x: account for rgmii-txid/rxid/id phy-mode (Christian Marangi)   
  - net: bridge: switchdev: Improve error message for port_obj_add/del functions (Oleksij Rempel)   
  - net/ipv4: add tracepoint for icmp_send (Peilin He)   
  - selftests: microchip: add test for QoS support on KSZ9477 switch family (Oleksij Rempel)   
  - net: dsa: microchip: add support DSCP priority mapping (Oleksij Rempel)   
  - net: dsa: add support switches global DSCP priority mapping (Oleksij Rempel)   
  - net: dsa: microchip: let DCB code do PCP and DSCP policy configuration (Oleksij Rempel)   
  - net: dsa: microchip: init predictable IPV to queue mapping for all non KSZ8xxx variants (Oleksij Rempel)   
  - net: dsa: microchip: enable ETS support for KSZ989X variants (Oleksij Rempel)   
  - net: dsa: microchip: dcb: add special handling for KSZ88X3 family (Oleksij Rempel)   
  - net: dsa: microchip: add support for different DCB app configurations (Oleksij Rempel)   
  - net: dsa: microchip: add multi queue support for KSZ88X3 variants (Oleksij Rempel)   
  - net: add IEEE 802.1q specific helpers (Oleksij Rempel)   
  - net: dsa: microchip: add IPV information support (Oleksij Rempel)   
  - net: dsa: add support for DCB get/set apptrust configuration (Oleksij Rempel)   
  - net: usb: sr9700: stop lying about skb->truesize (Eric Dumazet)   
  - net: usb: smsc75xx: stop lying about skb->truesize (Eric Dumazet)   
  - usb: aqc111: stop lying about skb->truesize (Eric Dumazet)   
  - selftests/net: fix uninitialized variables (John Hubbard)   
  - lib: Allow for the DIM library to be modular (Florian Fainelli)   
  - mptcp: fix possible NULL dereferences (Eric Dumazet)   
  - selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt (Florian Westphal)   
  - selftests/bpf: shorten subtest names for struct_ops_module test (Andrii Nakryiko)   
  - selftests/bpf: validate struct_ops early failure detection logic (Andrii Nakryiko)   
  - libbpf: improve early detection of doomed-to-fail BPF program loading (Andrii Nakryiko)   
  - libbpf: fix libbpf_strerror_r() handling unknown errors (Andrii Nakryiko)   
  - selftests/bpf: add another struct_ops callback use case test (Andrii Nakryiko)   
  - libbpf: handle yet another corner case of nulling out struct_ops program (Andrii Nakryiko)   
  - libbpf: remove unnecessary struct_ops prog validity check (Andrii Nakryiko)   
  - net: annotate writes on dev->mtu from ndo_change_mtu() (Eric Dumazet)   
  - net: dccp: Fix ccid2_rtt_estimator() kernel-doc (Jeff Johnson)   
  - net: phy: marvell: add support for MV88E6250 family internal PHYs (Matthias Schiffer)   
  - net: phy: marvell: constify marvell_hw_stats (Matthias Schiffer)   
  - selftests/bpf: Change functions definitions to support GCC (Cupertino Miranda)   
  - selftests/bpf: Add CFLAGS per source file and runner (Cupertino Miranda)   
  - bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC (Jose E. Marchesi)   
  - bpf: Disable some `attribute ignored' warnings in GCC (Jose E. Marchesi)   
  - bpf: Avoid __hidden__ attribute in static object (Jose E. Marchesi)   
  - bpf: Remove redundant page mask of vmf->address (Haiyue Wang)   
  - wifi: mwl8k: initialize cmd->addr[] properly (Dan Carpenter)   
  - virtio_net: Remove rtnl lock protection of command buffers (Daniel Jurgens)   
  - virtio_net: Add a lock for per queue RX coalesce (Daniel Jurgens)   
  - virtio_net: Do DIM update for specified queue only (Daniel Jurgens)   
  - virtio_net: Add a lock for the command VQ. (Daniel Jurgens)   
  - virtio_net: Remove command data from control_buf (Daniel Jurgens)   
  - virtio_net: Store RSS setting in virtnet_info (Daniel Jurgens)   
  - net: dsa: mt7530: detect PHY muxing when PHY is defined on switch MDIO bus (Arınç ÜNAL)   
  - rtnetlink: allow rtnl_fill_link_netnsid() to run under RCU protection (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL in rtnl_xdp_prog_skb() (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL in rtnl_fill_proto_down() (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for many attributes (Eric Dumazet)   
  - net: write once on dev->allmulti and dev->promiscuity (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for IFLA_TXQLEN output (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for IFLA_IFNAME output (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for IFLA_QDISC output (Eric Dumazet)   
  - net: qede: use return from qede_flow_parse_ports() (Asbjørn Sloth Tønnesen)   
  - net: qede: use return from qede_flow_spec_validate_unused() (Asbjørn Sloth Tønnesen)   
  - net: qede: use return from qede_parse_actions() for flow_spec (Asbjørn Sloth Tønnesen)   
  - mptcp: fix typos in comments (Shi-Sheng Yang)   
  - octeontx2-pf: Treat truncation of IRQ name as an error (Simon Horman)   
  - atm/fore200e: Delete unused 'fore200e_boards' (Dr. David Alan Gilbert)   
  - gve: Implement queue api (Shailend Chand)   
  - selftests/bpf: MUL range computation tests. (Cupertino Miranda)   
  - bpf/verifier: relax MUL range computation check (Cupertino Miranda)   
  - selftests/bpf: XOR and OR range computation tests. (Cupertino Miranda)   
  - bpf/verifier: improve XOR and OR range computation (Cupertino Miranda)   
  - bpf/verifier: refactor checks for range computation (Cupertino Miranda)   
  - bpf/verifier: replace calls to mark_reg_unknown. (Cupertino Miranda)   
  - gtp: identify tunnel via GTP device + GTP version + TEID + family (Pablo Neira Ayuso)   
  - gtp: support for IPv4-in-IPv6-GTP and IPv6-in-IPv4-GTP (Pablo Neira Ayuso)   
  - gtp: add helper function to build GTP packets from an IPv6 packet (Pablo Neira Ayuso)   
  - gtp: add helper function to build GTP packets from an IPv4 packet (Pablo Neira Ayuso)   
  - gtp: remove IPv4 and IPv6 header from context object (Pablo Neira Ayuso)   
  - gtp: move debugging to skbuff build helper function (Pablo Neira Ayuso)   
  - gtp: pass up link local traffic to userspace socket (Pablo Neira Ayuso)   
  - gtp: use IPv6 address /64 prefix for UE/MS (Pablo Neira Ayuso)   
  - gtp: add IPv6 support (Pablo Neira Ayuso)   
  - gtp: prepare for IPv6 support (Pablo Neira Ayuso)   
  - gtp: properly parse extension headers (Pablo Neira Ayuso)   
  - gtp: remove useless initialization (Pablo Neira Ayuso)   
  - bpftool, selftests/hid/bpf: Fix 29 clang warnings (John Hubbard)   
  - scx: Document semantics for ops during hotplug events (David Vernet)   
  - scx: Use per-cpu vars to CPU lifecycle (David Vernet)   
  - scx: Fix exit/error bstr formatting (David Vernet)   
  - selftests/bpf: Fix pointer arithmetic in test_xdp_do_redirect (Michal Schmidt)   
  - selftests/bpf: Use bpf_tracing.h instead of bpf_tcp_helpers.h (Martin KaFai Lau)   
  - ice: refactor struct ice_vsi_cfg_params to be inside of struct ice_vsi (Mateusz Polchlopek)   
  - ice: Deduplicate tc action setup (Marcin Szycik)   
  - ice: update E830 device ids and comments (Paul Greenwalt)   
  - ice: add additional E830 device ids (Paul Greenwalt)   
  - wifi: iwlwifi: Ensure prph_mac dump includes all addresses (Daniel Gabay)   
  - wifi: iwlwifi: mvm: don't request statistics in restart (Miri Korenblit)   
  - wifi: iwlwifi: mvm: exit EMLSR if secondary link is not used (Miri Korenblit)   
  - wifi: iwlwifi: mvm: add beacon template version 14 (striebit)   
  - wifi: iwlwifi: mvm: align UATS naming with firmware (Johannes Berg)   
  - wifi: iwlwifi: Force SCU_ACTIVE for specific platforms (Daniel Gabay)   
  - wifi: iwlwifi: mvm: record and return channel survey information (Benjamin Berg)   
  - wifi: iwlwifi: mvm: add the firmware API for channel survey (Benjamin Berg)   
  - wifi: iwlwifi: mvm: Fix race in scan completion (Ilan Peer)   
  - wifi: iwlwifi: mvm: Add a print for invalid link pair due to bandwidth (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: add a debugfs for reading EMLSR blocking reasons (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: Add active EMLSR blocking reasons prints (Yedidya Benshimol)   
  - wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (Miri Korenblit)   
  - wifi: iwlwifi: mvm: fix primary link setting (Miri Korenblit)   
  - wifi: iwlwifi: mvm: use already determined cmd_id (Johannes Berg)   
  - wifi: iwlwifi: mvm: don't reset link selection during restart (Johannes Berg)   
  - wifi: iwlwifi: Print EMLSR states name (Daniel Gabay)   
  - wifi: iwlwifi: mvm: Block EMLSR when a p2p/softAP vif is active (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: fix typo in debug print (Miri Korenblit)   
  - wifi: iwlwifi: mvm: exit EMLSR when CSA happens (Johannes Berg)   
  - wifi: iwlwifi: mvm: Disable/enable EMLSR due to link's bandwidth/band (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: avoid always prefering single-link (Miri Korenblit)   
  - wifi: iwlwifi: mvm: trigger link selection upon TTLM start/end (Miri Korenblit)   
  - wifi: iwlwifi: mvm: consider FWs recommendation for EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: Activate EMLSR based on traffic volume (Miri Korenblit)   
  - wifi: iwlwifi: mvm: don't always unblock EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: Always allow entering EMLSR from debugfs (Miri Korenblit)   
  - wifi: iwlwifi: mvm: add a debugfs for (un)blocking EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: trigger link selection after exiting EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: cleanup EMLSR when BT is active handling (Miri Korenblit)   
  - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal)   
  - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal)   
  - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal)   
  - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal)   
  - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal)   
  - netfilter: conntrack: remove flowtable early-drop test (Florian Westphal)   
  - netfilter: conntrack: documentation: remove reference to non-existent sysctl (Florian Westphal)   
  - netfilter: use NF_DROP instead of -NF_DROP (Jason Xing)   
  - net: add heuristic for enabling TCP fraglist GRO (Felix Fietkau)   
  - net: create tcp_gro_header_pull helper function (Felix Fietkau)   
  - net: create tcp_gro_lookup helper function (Felix Fietkau)   
  - net: add code for TCP fraglist GRO (Felix Fietkau)   
  - net: add support for segmenting TCP fraglist GSO packets (Felix Fietkau)   
  - net: move skb_gro_receive_list from udp to core (Felix Fietkau)   
  - net: microchip: lan743x: Reduce PTP timeout on HW failure (Rengarajan S)   
  - netfilter: conntrack: dccp: try not to drop skb in conntrack (Jason Xing)   
  - netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery (Linus Lüssing)   
  - netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handler (Pablo Neira Ayuso)   
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)   
  - gve: Alloc and free QPLs with the rings (Shailend Chand)   
  - gve: Account for stopped queues when reading NIC stats (Shailend Chand)   
  - gve: Reset Rx ring state in the ring-stop funcs (Shailend Chand)   
  - gve: Avoid rescheduling napi if on wrong cpu (Shailend Chand)   
  - gve: Make gve_turnup work for nonempty queues (Shailend Chand)   
  - gve: Make gve_turn(up|down) ignore stopped queues (Shailend Chand)   
  - gve: Add adminq funcs to add/remove a single Rx queue (Shailend Chand)   
  - gve: Make the GQ RX free queue funcs idempotent (Shailend Chand)   
  - queue_api: define queue api (Mina Almasry)   
  - scx: Dispatch locally until ops.cpu_online() invoked (David Vernet)   
  - [PATCH] SCX: scx_ops_bypass() can't grab a mutex (Tejun Heo)   
  - wifi: rtlwifi: 8192d: initialize rate_mask in rtl92de_update_hal_rate_mask() (Ping-Ke Shih)   
  - wifi: rtlwifi: Remove unused structs and avoid multiple -Wfamnae warnings (Gustavo A. R. Silva)   
  - wifi: rtw89: correct aSIFSTime for 6GHz band (Ping-Ke Shih)   
  - wifi: rtw89: wow: add ARP offload feature (Chin-Yen Lee)   
  - wifi: rtw89: wow: support WEP cipher on WoWLAN (Chih-Kang Chang)   
  - wifi: rtw89: wow: support 802.11w PMF IGTK rekey (Chih-Kang Chang)   
  - wifi: rtw89: wow: update latest PTK GTK info to mac80211 after resume (Chih-Kang Chang)   
  - wifi: rtw89: wow: add GTK rekey feature related H2C commands (Chih-Kang Chang)   
  - wifi: rtw89: wow: construct EAPoL packet for GTK rekey offload (Chih-Kang Chang)   
  - wifi: rtw89: use struct to fill H2C of WoWLAN global configuration (Chih-Kang Chang)   
  - wifi: rtw89: use struct to access firmware command h2c_dctl_sec_cam_v1 (Chih-Kang Chang)   
  - wifi: rtw89: wow: prepare PTK GTK info from mac80211 (Chih-Kang Chang)   
  - wifi: rtw89: wow: parsing Auth Key Management from associate request (Chih-Kang Chang)   
  - wifi: rtw89: wow: refine WoWLAN flows of HCI interrupts and low power mode (Chih-Kang Chang)   
  - wifi: rtw89: wow: send RFK pre-nofity H2C command in WoWLAN mode (Chin-Yen Lee)   
  - Revert "net: mirror skb frag ref/unref helpers" (Mina Almasry)   
  - bnxt: fix bnxt_get_avail_msix() returning negative values (David Wei)   
  - net: no longer acquire RTNL in threaded_show() (Eric Dumazet)   
  - tools: ynl: add --list-ops and --list-msgs to CLI (Jakub Kicinski)   
  - rtnetlink: use for_each_netdev_dump() in rtnl_stats_dump() (Eric Dumazet)   
  - rtnetlink: change rtnl_stats_dump() return value (Eric Dumazet)   
  - ci: enable kvm support in the github workflow (Andrea Righi)   
  - ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - appletalk: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - netfilter: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: Remove ctl_table sentinel elements from several networking subsystems (Joel Granados)   
  - net: sunrpc: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: rds: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - wifi: mac80211_hwsim: add support for BSS color (Aditya Kumar Singh)   
  - wifi: mac80211: handle color change per link (Aditya Kumar Singh)   
  - wifi: cfg80211: handle color change per link (Aditya Kumar Singh)   
  - wifi: cfg80211: Clear mlo_links info when STA disconnects (Xin Deng)   
  - wifi: iwlwifi: pcie: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing (Kees Cook)   
  - wifi: iwlwifi: Use request_module_nowait (Ben Greear)   
  - libbpf: Avoid casts from pointers to enums in bpf_tracing.h (Jose E. Marchesi)   
  - libbpf: Fix bpf_ksym_exists() in GCC (Jose E. Marchesi)   
  - net_sched: sch_sfq: annotate data-races around q->perturb_period (Eric Dumazet)   
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman)   
  - selftests/net: skip partial checksum packets in csum test (Willem de Bruijn)   
  - selftests: net: py: check process exit code in bkg() and background cmd() (Jakub Kicinski)   
  - IB/hfi1: allocate dummy net_device dynamically (Breno Leitao)   
  - net/mlx5e: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - libbpf: fix ring_buffer__consume_n() return result logic (Andrii Nakryiko)   
  - libbpf: fix potential overflow in ring__consume_n() (Andrii Nakryiko)   
  - selftests/bpf: Add test for the use of new args in cong_control (Miao Xu)   
  - bpf: tcp: Allow to write tp->snd_cwnd_stamp in bpf_tcp_ca (Miao Xu)   
  - tcp: Add new args for cong_control in tcp_congestion_ops (Miao Xu)   
  - selftests/bpf: Add kernel socket operation tests (Jordan Rife)   
  - selftests/bpf: Make sock configurable for each test case (Jordan Rife)   
  - selftests/bpf: Move IPv4 and IPv6 sockaddr test cases (Jordan Rife)   
  - selftests/bpf: Implement BPF programs for kernel socket operations (Jordan Rife)   
  - selftests/bpf: Implement socket kfuncs for bpf_testmod (Jordan Rife)   
  - selftests/bpf: Fix bind program for big endian systems (Jordan Rife)   
  - bpf: Missing trailing slash in tools/testing/selftests/bpf/Makefile (Jose E. Marchesi)   
  - libbpf: Fix error message in attach_kprobe_multi (Jiri Olsa)   
  - libbpf: Fix error message in attach_kprobe_session (Jiri Olsa)   
  - bnxt_en: Add VF PCI ID for 5760X (P7) chips (Ajit Khaparde)   
  - bnxt_en: Optimize recovery path ULP locking in the driver (Kalesh AP)   
  - bnxt_en: Add a mutex to synchronize ULP operations (Kalesh AP)   
  - bnxt_en: Don't call ULP_STOP/ULP_START during L2 reset (Michael Chan)   
  - bnxt_en: Don't support offline self test when RoCE driver is loaded (Kalesh AP)   
  - bnxt_en: share NQ ring sw_stats memory with subrings (Edwin Peer)   
  - net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path (Davide Caratti)   
  - wifi: mt76: enable spectrum management (Felix Fietkau)   
  - wifi: mt76: mt7925: add EHT radiotap support in monitor mode (Deren Wu)   
  - wifi: mt76: mt7921e: add LED control support (Hao Zhang)   
  - wifi: mt76: mt7996: let upper layer handle MGMT frame protection (Michael-CY Lee)   
  - wifi: mt76: mt7921: cqm rssi low/high event notify (Rong Yan)   
  - wifi: mt76: make const arrays in functions static (Felix Fietkau)   
  - wifi: mt76: connac: use muar idx 0xe for non-mt799x as well (Felix Fietkau)   
  - wifi: mt76: mt7996: add sanity checks for background radar trigger (StanleyYP Wang)   
  - wifi: mt76: connac: enable critical packet mode support for mt7992 (Howard Hsu)   
  - wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature (Howard Hsu)   
  - wifi: mt76: mt7996: fix non-main BSS no beacon issue for MBSS scenario (Henry Yen)   
  - wifi: mt76: connac: enable HW CSO module for mt7996 (Howard Hsu)   
  - wifi: mt76: mt7996: set RCPI value in rate control command (Peter Chiu)   
  - wifi: mt76: connac: use peer address for station BMC entry (Shayne Chen)   
  - wifi: mt76: mt7996: disable rx header translation for BMC entry (Shayne Chen)   
  - wifi: mt76: mt7915: Remove unused of_gpio.h (Andy Shevchenko)   
  - wifi: mt76: mt7915: add missing chanctx ops (Ben Greear)   
  - wifi: mt76: sdio: move mcu queue size check inside critical section (Lorenzo Bianconi)   
  - wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet() (Lorenzo Bianconi)   
  - wifi: mt76: mt7925: ensure 4-byte alignment for suspend & wow command (Ming Yen Hsieh)   
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (Leon Yen)   
  - wifi: mt76: mt7921: introduce mt7920 PCIe support (Deren Wu)   
  - wifi: mt76: mt7996: fix size of txpower MCU command (Chad Monroe)   
  - wifi: mt76: connac: check for null before dereferencing (Muhammad Usama Anjum)   
  - wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset (Felix Fietkau)   
  - wifi: mt76: mt7603: fix tx queue of loopback packets (Felix Fietkau)   
  - wifi: mt76: mt7915: add fallback in case of missing precal data (Felix Fietkau)   
  - wifi: mt76: mt7915: add mt7986, mt7916 and mt7981 pre-calibration (Peter Chiu)   
  - wifi: mt76: mt7915: add support for disabling in-band discovery (MeiChia Chiu)   
  - wifi: mt76: mt7996: only set MT76_MCU_RESET for the main phy (Felix Fietkau)   
  - wifi: mt76: mt7915: only set MT76_MCU_RESET for the main phy (Bo Jiao)   
  - wifi: mt76: mt7915: fix HE PHY capabilities IE for station mode (Howard Hsu)   
  - wifi: mt76: mt7915: fix bogus Tx/Rx airtime duration values (Henry Yen)   
  - wifi: mt76: mt7915: fix mcu command format for mt7915 tx stats (Peter Chiu)   
  - wifi: mt76: fix tx packet loss when scanning on DBDC (Felix Fietkau)   
  - wifi: mt76: replace skb_put with skb_put_zero (Felix Fietkau)   
  - wifi: mt76: mt7915: initialize rssi on adding stations (Felix Fietkau)   
  - wifi: ath12k: fix the problem that down grade phy mode operation (Lingbo Kong)   
  - wifi: qtnfmac: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - wifi: qtnfmac: Move stats allocation to core (Breno Leitao)   
  - wifi: rtl8xxxu: cleanup includes (Ping-Ke Shih)   
  - wifi: rtl8xxxu: remove rtl8xxxu_ prefix from filenames (Kalle Valo)   
  - wifi: rtl8xxxu: remove some unused includes (Kalle Valo)   
  - wifi: rtw89: 8852c: refine power sequence to imporve power consumption (Chia-Yuan Li)   
  - wifi: rtw89: reset AFEDIG register in power off sequence (Chin-Yen Lee)   
  - wifi: rtlwifi: Adjust rtl8192d-common for USB (Bitterblue Smith)   
  - wifi: rtlwifi: Clean up rtl8192d-common a bit (Bitterblue Smith)   
  - wifi: rtlwifi: Move code from rtl8192de to rtl8192d-common (Bitterblue Smith)   
  - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path (Bitterblue Smith)   
  - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE (Bitterblue Smith)   
  - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power (Bitterblue Smith)   
  - net: dsa: Remove adjust_link paths (Florian Fainelli)   
  - net: dsa: Remove fixed_link_update member (Florian Fainelli)   
  - net: ti: icssg_prueth: Add SW TX / RX Coalescing based on hrtimers (MD Danish Anwar)   
  - arp: Convert ioctl(SIOCGARP) to RCU. (Kuniyuki Iwashima)   
  - net: Protect dev->name by seqlock. (Kuniyuki Iwashima)   
  - arp: Get dev after calling arp_req_(delete|set|get)(). (Kuniyuki Iwashima)   
  - arp: Remove a nest in arp_req_get(). (Kuniyuki Iwashima)   
  - arp: Factorise ip_route_output() call in arp_req_set() and arp_req_delete(). (Kuniyuki Iwashima)   
  - arp: Validate netmask earlier for SIOCDARP and SIOCSARP in arp_ioctl(). (Kuniyuki Iwashima)   
  - arp: Move ATF_COM setting in arp_req_set(). (Kuniyuki Iwashima)   
  - implement-ops (Tejun Heo)   
  - bstr (Tejun Heo)   
  - selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time (Florian Westphal)   
  - bpf: crypto: fix build when CONFIG_CRYPTO=m (Vadim Fedorenko)   
  - libbpf: better fix for handling nulled-out struct_ops program (Andrii Nakryiko)   
  - selftests/bpf: add tests for the "module: Function" syntax (Viktor Malik)   
  - libbpf: support "module: Function" syntax for tracing programs (Viktor Malik)   
  - scx_qmap: monitor_cpuperf() also needs __COMPAT_HAS_CPUMASKS test (Tejun Heo)   
  - ipv6: anycast: use call_rcu_hurry() in aca_put() (Eric Dumazet)   
  - xfrm: Restrict SA direction attribute to specific netlink message types (Antony Antony)   
  - xfrm: Add dir validation to "in" data path lookup (Antony Antony)   
  - xfrm: Add dir validation to "out" data path lookup (Antony Antony)   
  - xfrm: Add Direction to the SA in or out (Antony Antony)   
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao)   
  - net: loopback: Do not allocate lstats explicitly (Breno Leitao)   
  - dt-bindings: net: snps, dwmac: remove tx-sched-sp property (Flavio Suligoi)   
  - net: move sysctl_mem_pcpu_rsv to net_hotdata (Eric Dumazet)   
  - net: add <net/proto_memory.h> (Eric Dumazet)   
  - tcp: move tcp_out_of_memory() to net/ipv4/tcp.c (Eric Dumazet)   
  - net: move sysctl_skb_defer_max to net_hotdata (Eric Dumazet)   
  - net: move sysctl_max_skb_frags to net_hotdata (Eric Dumazet)   
  - inet: introduce dst_rtable() helper (Eric Dumazet)   
  - selftests/bpf: Drop start_server_proto helper (Geliang Tang)   
  - selftests/bpf: Make start_mptcp_server static (Geliang Tang)   
  - selftests/bpf: Add opts argument for __start_server (Geliang Tang)   
  - MAINTAINERS: Add link to SCX repo (Tejun Heo)   
  - MAINTAINERS: Separate out sched_ext tree (Tejun Heo)   
  - selftests/bpf: Add kprobe session cookie test (Jiri Olsa)   
  - selftests/bpf: Add kprobe session test (Jiri Olsa)   
  - libbpf: Add kprobe session attach type name to attach_type_name (Jiri Olsa)   
  - libbpf: Add support for kprobe session attach (Jiri Olsa)   
  - bpf: Add support for kprobe session cookie (Jiri Olsa)   
  - bpf: Add support for kprobe session context (Jiri Olsa)   
  - bpf: Add support for kprobe session attach (Jiri Olsa)   
  - i40e: Add and use helper to reconfigure TC for given VSI (Ivan Vecera)   
  - i40e: Add helper to access main VEB (Ivan Vecera)   
  - i40e: Consolidate checks whether given VSI is main (Ivan Vecera)   
  - i40e: Add helper to access main VSI (Ivan Vecera)   
  - i40e: Refactor argument of i40e_detect_recover_hung() (Ivan Vecera)   
  - i40e: Refactor argument of several client notification functions (Ivan Vecera)   
  - i40e: Remove flags field from i40e_veb (Ivan Vecera)   
  - scx: Run selftests in scx CI (David Vernet)   
  - scx: Fix selftests (David Vernet)   
  - scx: Refactor binary run logic in scx CI (David Vernet)   
  - scx: Download missing CI packages (David Vernet)   
  - selftests: drv-net-hw: add test for memory allocation failures with page pool (Jakub Kicinski)   
  - selftests: drv-net: support generating iperf3 load (Jakub Kicinski)   
  - selftests: net: py: avoid all ports < 10k (Jakub Kicinski)   
  - selftests: net: py: extract tool logic (Jakub Kicinski)   
  - selftests: drv-net-hw: support using Python from net hw tests (Jakub Kicinski)   
  - net: page_pool: support error injection (Jakub Kicinski)   
  - selftests: netfilter: avoid test timeouts on debug kernels (Florian Westphal)   
  - selftests/bpf: Drop an unused local variable (Benjamin Tissoires)   
  - bpf: Do not walk twice the hash map on free (Benjamin Tissoires)   
  - bpf: Do not walk twice the map on free (Benjamin Tissoires)   
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich)   
  - wifi: ath12k: fix flush failure in recovery scenarios (Baochen Qiang)   
  - wifi: ath12k: check M3 buffer size as well whey trying to reuse it (Baochen Qiang)   
  - net: sfp-bus: constify link_modes to sfp_select_interface() (Russell King (Oracle))   
  - net: sfp: allow use 2500base-X for 2500base-T modules (Russell King (Oracle))   
  - net: phylink: add debug print for empty posssible_interfaces (Russell King (Oracle))   
  - net: dsa: realtek: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: mt7530: do not set MT7530_P5_DIS when PHY muxing is being used (Arınç ÜNAL)   
  - net/smc: implement DMB-merged operations of loopback-ism (Wen Gu)   
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged (Wen Gu)   
  - net/smc: {at|de}tach sndbuf to peer DMB if supported (Wen Gu)   
  - net/smc: add operations to merge sndbuf with peer DMB (Wen Gu)   
  - net/smc: register loopback-ism into SMC-D device list (Wen Gu)   
  - net/smc: ignore loopback-ism when dumping SMC-D devices (Wen Gu)   
  - net/smc: mark optional smcd_ops and check for support when called (Wen Gu)   
  - net/smc: implement DMB-related operations of loopback-ism (Wen Gu)   
  - net/smc: implement ID-related operations of loopback-ism (Wen Gu)   
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut (Wen Gu)   
  - net/smc: decouple ism_client from SMC-D DMB registration (Wen Gu)   
  - sctp: prefer struct_size over open coded arithmetic (Erick Archer)   
  - virtio-net: support queue stat (Xuan Zhuo)   
  - netdev: add queue stats (Xuan Zhuo)   
  - virtio_net: add the total stats field (Xuan Zhuo)   
  - virtio_net: device stats helpers support driver stats (Xuan Zhuo)   
  - virtio_net: support device stats (Xuan Zhuo)   
  - virtio_net: remove "_queue" from ethtool -S (Xuan Zhuo)   
  - virtio_net: introduce device stats feature and structures (Xuan Zhuo)   
  - virtio_net: introduce ability to get reply info from device (Xuan Zhuo)   
  - net: txgbe: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: prestera: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: mvneta: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: mvpp2: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: hsr: init prune_proxy_timer sooner (Eric Dumazet)   
  - net: dsa: ksz_common: use separate phylink_mac_ops for ksz8830 (Russell King (Oracle))   
  - net: dsa: ksz_common: sub-driver phylink ops (Russell King (Oracle))   
  - net: dsa: ksz_common: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: ksz_common: remove phylink_mac_config from ksz_dev_ops (Russell King (Oracle))   
  - selftests/bpf: validate nulled-out struct_ops program is handled properly (Andrii Nakryiko)   
  - libbpf: handle nulled-out program in struct_ops correctly (Andrii Nakryiko)   
  - bpf: Include linux/types.h for u32 (Dmitrii Bundin)   
  - selftests/bpf: Free strdup memory in veristat (Geliang Tang)   
  - selftests/bpf: Free strdup memory in test_sockmap (Geliang Tang)   
  - selftests/bpf: Run cgroup1_hierarchy test in own mount namespace (Viktor Malik)   
  - bpf: Switch to krealloc_array() (Andy Shevchenko)   
  - bpf: Use struct_size() (Andy Shevchenko)   
  - samples/bpf: Add valid info for VMLINUX_BTF (Tao Chen)   
  - bpf: Fix verifier assumptions about socket->sk (Alexei Starovoitov)   
  - tools/sched_ext: Add __COMPAT_scx_bpf_exit() (Tejun Heo)   
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich)   
  - net: phy: micrel: Add support for PTP_PF_EXTTS for lan8814 (Horatiu Vultur)   
  - net: dsa: realtek: add LED drivers for rtl8366rb (Luiz Angelo Daros de Luca)   
  - net: dsa: realtek: do not assert reset on remove (Luiz Angelo Daros de Luca)   
  - net: dsa: realtek: keep default LED state in rtl8366rb (Luiz Angelo Daros de Luca)   
  - ipv6: introduce dst_rt6_info() helper (Eric Dumazet)   
  - bpf, docs: Clarify PC use in instruction-set.rst (Dave Thaler)   
  - mlxsw: pci: Use NAPI for event processing (Amit Cohen)   
  - mlxsw: pci: Reorganize 'mlxsw_pci_queue' structure (Amit Cohen)   
  - mlxsw: pci: Initialize dummy net devices for NAPI (Amit Cohen)   
  - mlxsw: pci: Ring RDQ and CQ doorbells once per several completions (Amit Cohen)   
  - mlxsw: pci: Handle up to 64 Rx completions in tasklet (Amit Cohen)   
  - ipv6: use call_rcu_hurry() in fib6_info_release() (Eric Dumazet)   
  - inet: use call_rcu_hurry() in inet_free_ifa() (Eric Dumazet)   
  - net: give more chances to rcu in netdev_wait_allrefs_any() (Eric Dumazet)   
  - net: ethernet: ti: am65-cpsw-qos: Add support to taprio for past base_time (Tanmay Patil)   
  - wifi: rtlwifi: rtl8723be: Make read-only arrays static const (Colin Ian King)   
  - wifi: rtw89: Remove the redundant else branch in the function rtw89_phy_get_kpath (Jiapeng Chong)   
  - wifi: rtw89: coex: Check and enable reports after run coex (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Wi-Fi role v8 condition when set BTG control (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Wi-Fi role v8 condition when set Bluetooth channel (Ching-Te Ku)   
  - wifi: rtw89: coex: Fix unexpected value in version 7 slot parameter (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Bluetooth version report version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Bluetooth frequency hopping map version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Bluetooth scan parameter report version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Wi-Fi null data status version 7 (Ching-Te Ku)   
  - wifi: rtw89: 8852b: update hardware parameters for RFE type 5 (Ping-Ke Shih)   
  - wifi: rtw89: fix CTS transmission issue with center frequency deviation (Kuan-Chung Chen)   
  - scx: Build fixes for UP and SCX off (Tejun Heo)   
  - scx: Check for 0 slice after set_next_task_scx() (Tejun Heo)   
  - tools/sched_ext: Add -v option to example schedulers to aid debugging libbpf issues (Tejun Heo)   
  - tools: ynl: don't append doc of missing type directly to the type (Jakub Kicinski)   
  - tools/sched_ext: Drop libbpf_set_strict_mode() calls (Tejun Heo)   
  - scx: Cosmetic changes (Tejun Heo)   
  - selftests: drv-net: validate the environment (Jakub Kicinski)   
  - selftests: drv-net: reimplement the config parser (Jakub Kicinski)   
  - selftests: drv-net: extend the README with more info and example (Jakub Kicinski)   
  - scx/compat.h: Add backward compat support for missing ops.tick() (Tejun Heo)   
  - tools/sched_ext: Add compat helpers for the new features (Tejun Heo)   
  - tcp: fix tcp_grow_skb() vs tstamps (Eric Dumazet)   
  - scx/compat.h: Fix inversed struct_has_field test in SCX_OPS_LOAD() (Tejun Heo)   
  - net: dsa: lan9303: use ethtool_puts() for lan9303_get_strings() (Justin Stitt)   
  - user_exit_info: Fix and clean up ECODE handling and apply to the example schedulers (Tejun Heo)   
  - scx: Don't do debug dump on non-error exits (Tejun Heo)   
  - bpf_helpers.h: Define bpf_tail_call_static when building with GCC (Jose E. Marchesi)   
  - rstreason: make it work in trace world (Jason Xing)   
  - mptcp: introducing a helper into active reset logic (Jason Xing)   
  - mptcp: support rstreason for passive reset (Jason Xing)   
  - tcp: support rstreason for passive reset (Jason Xing)   
  - rstreason: prepare for active reset (Jason Xing)   
  - rstreason: prepare for passive reset (Jason Xing)   
  - net: introduce rstreason to detect why the RST is sent (Jason Xing)   
  - igc: Add Tx hardware timestamp request for AF_XDP zero-copy packet (Song Yoong Siang)   
  - selftests: virtio_net: add initial tests (Jiri Pirko)   
  - selftests: forwarding: add wait_for_dev() helper (Jiri Pirko)   
  - selftests: forwarding: add check_driver() helper (Jiri Pirko)   
  - selftests: forwarding: add ability to assemble NETIFS array by driver name (Jiri Pirko)   
  - virtio: add debugfs infrastructure to allow to debug virtio features (Jiri Pirko)   
  - wifi: brcmfmac: remove unused brcmf_usb_image struct (Christophe JAILLET)   
  - wifi: brcmsmac: ampdu: remove unused cb_del_ampdu_pars struct (Christophe JAILLET)   
  - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Lukasz Majewski)   
  - test: hsr: Extract version agnostic information from ping command output (Lukasz Majewski)   
  - test: hsr: Move common code to hsr_common.sh file (Lukasz Majewski)   
  - test: hsr: Remove script code already implemented in lib.sh (Lukasz Majewski)   
  - net: hsr: Provide RedBox support (HSR-SAN) (Lukasz Majewski)   
  - net/sched: fix false lockdep warning on qdisc root lock (Davide Caratti)   
  - net: lan966x: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - net: lan966x: flower: rename goto in lan966x_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: lan966x: flower: add extack to lan966x_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: remove goto in sparx5_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: add extack to sparx5_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: only do lookup if fragment flags are set (Asbjørn Sloth Tønnesen)   
  - net: wwan: t7xx: Un-embed dummy device (Breno Leitao)   
  - bpf, docs: Add introduction for use in the ISA Internet Draft (Dave Thaler)   
  - net: sparx5: Correct spelling in comments (Simon Horman)   
  - net: encx24j600: Correct spelling in comments (Simon Horman)   
  - net: lan966x: Correct spelling in comments (Simon Horman)   
  - net: lan743x: Correct spelling in comments (Simon Horman)   
  - r8152: replace dev_info with dev_dbg for loading firmware (Hayes Wang)   
  - net: usb: ax88179_178a: Add check for usbnet_get_endpoints() (Ma Ke)   
  - net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module (Daniel Golle)   
  - net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module (Marek Behún)   
  - net: sfp: update comment for FS SFP-10G-T quirk (Marek Behún)   
  - net: add two more call_rcu_hurry() (Eric Dumazet)   
  - selftests/bpf: extend BPF_SOCK_OPS_RTT_CB test for srtt and mrtt_us (Philo Lu)   
  - bpf: add mrtt and srtt as BPF_SOCK_OPS_RTT_CB args (Philo Lu)   
  - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params (Eduard Zingerman)   
  - bpf: check bpf_dummy_struct_ops program params for test runs (Eduard Zingerman)   
  - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops (Eduard Zingerman)   
  - selftests/bpf: adjust dummy_st_ops_success to detect additional error (Eduard Zingerman)   
  - bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable (Eduard Zingerman)   
  - tcp: avoid premature drops in tcp_add_backlog() (Eric Dumazet)   
  - net: dsa: b53: provide own phylink MAC operations (Florian Fainelli)   
  - net: dsa: b53: Remove b53_adjust_link() (Florian Fainelli)   
  - net: dsa: b53: Call b53_eee_init() from b53_mac_link_up() (Florian Fainelli)   
  - net: dsa: b53: Configure RGMII for 531x5 and MII for 5325 (Florian Fainelli)   
  - net: dsa: b53: Force flow control for BCM5301X CPU port(s) (Florian Fainelli)   
  - net: dsa: b53: Introduce b53_adjust_5325_mii() (Florian Fainelli)   
  - net: dsa: b53: Introduce b53_adjust_531x5_rgmii() (Florian Fainelli)   
  - net: dsa: b53: Stop exporting b53_phylink_* routines (Florian Fainelli)   
  - selftests/bpf: Add ring_buffer__consume_n test. (Andrea Righi)   
  - bpf: Add bpf_guard_preempt() convenience macro (Alexei Starovoitov)   
  - tools: testing: selftests: prefer TEST_PROGS for conntrack_dump_flush (Florian Westphal)   
  - net: bridge: remove redundant check of f->dst (linke li)   
  - net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches (Matthias Schiffer)   
  - net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers (Matthias Schiffer)   
  - wifi: ath10k: drop fw.eboard file name (Dmitry Baryshkov)   
  - wifi: ath10k: drop chip-specific board data file name (Dmitry Baryshkov)   
  - wifi: ath10k: populate board data for WCN3990 (Dmitry Baryshkov)   
  - enic: Replace hardcoded values for vnic descriptor by defines (Satish Kharat)   
  - tcp: update sacked after tracepoint in __tcp_retransmit_skb (Philo Lu)   
  - tcp: move tcp_skb_cb->sacked flags to enum (Philo Lu)   
  - selftests: net: extract BPF building logic from the Makefile (Jakub Kicinski)   
  - selftests: net: name bpf objects consistently and simplify Makefile (Jakub Kicinski)   
  - net: pse-pd: Kconfig: Add missing Regulator API dependency (Kory Maincent (Dent Project))   
  - net: pse-pd: pse_core: Fix pse regulator type (Kory Maincent (Dent Project))   
  - net: pse-pd: pse_core: Add missing kdoc return description (Kory Maincent (Dent Project))   
  - octeontx2-pf: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - net: hns3: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: ethernet: ti: cpsw: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: ethernet: ti: am65-cpsw: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - bnxt_en: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: ethernet: ti: am65-cpsw-nuss: Enable SGMII mode for J784S4 CPSW9G (Chintan Vankar)   
  - scx: Cosmetic changes from patch split (Tejun Heo)   
  - selftests: netfilter: fix conntrack_dump_flush retval on unsupported kernel (Florian Westphal)   
  - selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load (Florian Westphal)   
  - selftests: netfilter: conntrack_vrf.sh: prefer socat, not iperf3 (Florian Westphal)   
  - selftests: netfilter: skip tests on early errors (Florian Westphal)   
  - selftests: netfilter: nft_flowtable.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_flowtable.sh: re-run with random mtu sizes (Florian Westphal)   
  - selftests: netfilter: nft_concat_range.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_concat_range.sh: drop netcat support (Florian Westphal)   
  - selftests: netfilter: nft_concat_range.sh: move to lib.sh infra (Florian Westphal)   
  - net: openvswitch: Release reference to netdev (Jun Gu)   
  - selftests: bpf: crypto: add benchmark for crypto functions (Vadim Fedorenko)   
  - selftests: bpf: crypto skcipher algo selftests (Vadim Fedorenko)   
  - bpf: crypto: add skcipher to bpf crypto (Vadim Fedorenko)   
  - bpf: make common crypto API for TC/XDP programs (Vadim Fedorenko)   
  - bpf: update the comment for BTF_FIELDS_MAX (Haiyue Wang)   
  - selftests/bpf: Fix wq test. (Alexei Starovoitov)   
  - selftests/bpf: Use make_sockaddr in test_sock_addr (Geliang Tang)   
  - selftests/bpf: Use connect_to_addr in test_sock_addr (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in test_sock_addr (Geliang Tang)   
  - selftests/bpf: Use log_err in open_netns/close_netns (Geliang Tang)   
  - selftests/bpf: Fix a fd leak in error paths in open_netns (Geliang Tang)   
  - MAINTAINERS: add entry for libeth and libie (Alexander Lobakin)   
  - iavf: switch to Page Pool (Alexander Lobakin)   
  - iavf: pack iavf_ring more efficiently (Alexander Lobakin)   
  - libeth: add Rx buffer management (Alexander Lobakin)   
  - page_pool: add DMA-sync-for-CPU inline helper (Alexander Lobakin)   
  - page_pool: constify some read-only function arguments (Alexander Lobakin)   
  - slab: introduce kvmalloc_array_node() and kvcalloc_node() (Alexander Lobakin)   
  - iavf: drop page splitting and recycling (Alexander Lobakin)   
  - iavf: kill "legacy-rx" for good (Alexander Lobakin)   
  - net: intel: introduce {, Intel} Ethernet common library (Alexander Lobakin)   
  - selftests/bpf: Add tests for preempt kfuncs (Kumar Kartikeya Dwivedi)   
  - bpf: Introduce bpf_preempt_[disable,enable] kfuncs (Kumar Kartikeya Dwivedi)   
  - bpf: Don't check for recursion in bpf_wq_work. (Alexei Starovoitov)   
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)   
  - wifi: ath12k: set mlo_capable_flags based on QMI PHY capability (Raj Kumar Bhagat)   
  - wifi: ath12k: read single_chip_mlo_support parameter from QMI PHY capability (Raj Kumar Bhagat)   
  - wifi: ath12k: add support to handle beacon miss for WCN7850 (Kang Yang)   
  - net: sparx5: add support for matchall mirror stats (Daniel Machon)   
  - net: sparx5: add the tc glue to support port mirroring (Daniel Machon)   
  - net: sparx5: add port mirroring implementation (Daniel Machon)   
  - net: sparx5: add bookkeeping code for matchall rules (Daniel Machon)   
  - net: sparx5: add new register definitions (Daniel Machon)   
  - wifi: ath11k: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: ath10k: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: qtnfmac: Use netdev dummy allocator helper (Breno Leitao)   
  - net: ibm/emac: allocate dummy net_device dynamically (Breno Leitao)   
  - net: ipa: allocate dummy net_device dynamically (Breno Leitao)   
  - net: mediatek: mtk_eth_sock: allocate dummy net_device dynamically (Breno Leitao)   
  - net: marvell: prestera: allocate dummy net_device dynamically (Breno Leitao)   
  - net: create a dummy net_device allocator (Breno Leitao)   
  - net: free_netdev: exit earlier if dummy (Breno Leitao)   
  - net: core: Fix documentation (Breno Leitao)   
  - net: dsa: mt7530: explain exposing MDIO bus of MT7531AE better (Arınç ÜNAL)   
  - net: dsa: mt7530: do not pass port variable to mt7531_rgmii_setup() (Arınç ÜNAL)   
  - net: dsa: mt7530: use priv->ds->num_ports instead of MT7530_NUM_PORTS (Arınç ÜNAL)   
  - net: dsa: mt7530: get rid of mac_port_validate member of mt753x_info (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_PMEEECR_P() (Arınç ÜNAL)   
  - net: dsa: mt7530: get rid of function sanity check (Arınç ÜNAL)   
  - net: dsa: mt7530: define MAC speed capabilities per switch model (Arınç ÜNAL)   
  - net: dsa: mt7530: return mt7530_setup_mdio & mt7531_setup_common on error (Arınç ÜNAL)   
  - net: dsa: mt7530: move MT753X_MTRAP operations for MT7530 (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_HWTRAP and MT7530_MHWTRAP (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_MFC and MT7531_CFC, add MT7531_QRY_FFP (Arınç ÜNAL)   
  - net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw (Arınç ÜNAL)   
  - net: dsa: mt7530: rename p5_intf_sel and use only for MT7530 switch (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_PMCR_P() (Arınç ÜNAL)   
  - net: dsa: mt7530: disable EEE abilities on failure on MT7531 and MT7988 (Arınç ÜNAL)   
  - selftests/bpf: wq: add bpf_wq_start() checks (Benjamin Tissoires)   
  - bpf: add bpf_wq_start (Benjamin Tissoires)   
  - selftests/bpf: add checks for bpf_wq_set_callback() (Benjamin Tissoires)   
  - bpf: wq: add bpf_wq_set_callback_impl (Benjamin Tissoires)   
  - selftests/bpf: wq: add bpf_wq_init() checks (Benjamin Tissoires)   
  - bpf: wq: add bpf_wq_init (Benjamin Tissoires)   
  - selftests/bpf: add bpf_wq tests (Benjamin Tissoires)   
  - neighbour: fix neigh_master_filtered() (Eric Dumazet)   
  - bpf: allow struct bpf_wq to be embedded in arraymaps and hashmaps (Benjamin Tissoires)   
  - bpf: add support for KF_ARG_PTR_TO_WORKQUEUE (Benjamin Tissoires)   
  - bpf: verifier: bail out if the argument is not a map (Benjamin Tissoires)   
  - tools: sync include/uapi/linux/bpf.h (Benjamin Tissoires)   
  - bpf: add support for bpf_wq user type (Benjamin Tissoires)   
  - bpf: replace bpf_timer_cancel_and_free with a generic helper (Benjamin Tissoires)   
  - bpf: replace bpf_timer_set_callback with a generic helper (Benjamin Tissoires)   
  - bpf: replace bpf_timer_init with a generic helper (Benjamin Tissoires)   
  - bpf: make timer data struct more generic (Benjamin Tissoires)   
  - scx: Implement scx_bpf_consume_task() (Tejun Heo)   
  - scx_qmap: Use a user DSQ instead of DSQ_GLOBAL (Tejun Heo)   
  - scx: Better task_can_run_on_remote_rq() (Tejun Heo)   
  - scx: Refactor consume_dispatch_q() (Tejun Heo)   
  - scx: Implement BPF DSQ iterator (Tejun Heo)   
  - scx: Introduce nldsq_next_task() and nldsq_for_each_task() (Tejun Heo)   
  - scx: Move p->scx.dsq_flags into p->scx.dsq_node (Tejun Heo)   
  - scx: Always keep tasks on dsq->list (Tejun Heo)   
  - scx: Use uncached rbtree for dsq priq (Tejun Heo)   
  - scx: Rename scx_dispatch_q node field names (Tejun Heo)   
  - scx: Use WRITE_ONCE/READ_ONCE() on dsq->nr (Tejun Heo)   
  - scx: Remove scx_kfunc_set_ops_only (Tejun Heo)   
  - scx: Make scx_bpf_dsq_nr_queued() safe to call from any context (Tejun Heo)   
  - scx: Make scx_kf_allowed_on_arg_tasks() actually use @mask (Tejun Heo)   
  - scx: Cosmetic / trivial changes (Tejun Heo)   
  - scx: Add init_scx_entity() and initialize scx->tasks_node too (Tejun Heo)   
  - scx: Add barrier() to scx_kf_[dis]allow() (Tejun Heo)   
  - selftests: drv-net: add require_XYZ() helpers for validating env (Jakub Kicinski)   
  - selftests: drv-net: add a TCP ping test case (and useful helpers) (Jakub Kicinski)   
  - selftests: net: support matching cases by name prefix (Jakub Kicinski)   
  - selftests: drv-net: add a trivial ping test (Jakub Kicinski)   
  - selftests: drv-net: construct environment for running tests which require an endpoint (Jakub Kicinski)   
  - selftests: drv-net: factor out parsing of the env (Jakub Kicinski)   
  - selftests: drv-net: define endpoint structures (Jakub Kicinski)   
  - selftests: drv-net: test dumping qstats per device (Jakub Kicinski)   
  - netlink: support all extack types in dumps (Jakub Kicinski)   
  - netlink: move extack writing helpers (Jakub Kicinski)   
  - netdev: support dumping a single netdev in qstats (Jakub Kicinski)   
  - af_unix: Don't access successor in unix_del_edges() during GC. (Kuniyuki Iwashima)   
  - wifi: rtw89: coex: Re-order the index for the report from firmware (Ching-Te Ku)   
  - wifi: rtw89: coex: Add coexistence firmware control report version 8 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add GPIO signal control version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add register monitor report v7 format (Ching-Te Ku)   
  - wifi: rtw89: coex: Update Bluetooth polluted Wi-Fi TX logic (Ching-Te Ku)   
  - wifi: rtw89: coex: Add PTA path control condition for chip RTL8922A (Ching-Te Ku)   
  - wifi: rtw89: coex: Add version 3 report map of H2C command (Ching-Te Ku)   
  - wifi: rtw89: coex: Add v7 firmware cycle status report (Ching-Te Ku)   
  - wifi: rtw89: coex: Allow Bluetooth doing traffic during Wi-Fi scan (Ching-Te Ku)   
  - wifi: rtl8xxxu: Add LED control code for RTL8723BU (Bitterblue Smith)   
  - net: ipa: kill ipa_version_supported() (Alex Elder)   
  - net: ipa: fix two minor ipa_cmd problems (Alex Elder)   
  - net: ipa: fix two bogus argument names (Alex Elder)   
  - net: ipa: make ipa_table_hash_support() a real function (Alex Elder)   
  - net: ipa: remove unneeded FILT_ROUT_HASH_EN definitions (Alex Elder)   
  - net: ipa: call device_init_wakeup() earlier (Alex Elder)   
  - net: ipa: only enable the SUSPEND IPA interrupt when needed (Alex Elder)   
  - net: ipa: maintain bitmap of suspend-enabled endpoints (Alex Elder)   
  - wifi: rtl8xxxu: Add LED control code for RTL8192CU family (Bitterblue Smith)   
  - wifi: rtl8xxxu: Add separate MAC init table for RTL8192CU (Bitterblue Smith)   
  - net: stmmac: Move MAC caps init to phylink MAC caps getter (Serge Semin)   
  - net: stmmac: Rename phylink_get_caps() callback to update_caps() (Serge Semin)   
  - net: ethernet: ti: am65-cpsw/ethtool: Enable RX HW timestamp only for PTP packets (Chintan Vankar)   
  - net: ethernet: ti: am65-cpts: Enable RX HW timestamp for PTP packets using CPTS FIFO (Chintan Vankar)   
  - wifi: ath12k: ACPI band edge channel power support (Lingbo Kong)   
  - wifi: ath12k: ACPI CCA threshold support (Lingbo Kong)   
  - wifi: ath12k: ACPI SAR support (Lingbo Kong)   
  - wifi: ath12k: ACPI TAS support (Lingbo Kong)   
  - wifi: ath12k: change supports_suspend to true for WCN7850 (Baochen Qiang)   
  - wifi: ath12k: support suspend/resume (Baochen Qiang)   
  - wifi: ath12k: avoid stopping mac80211 queues in ath12k_core_restart() (Baochen Qiang)   
  - wifi: ath12k: no need to handle pktlog during suspend/resume (Baochen Qiang)   
  - wifi: ath12k: flush all packets before suspend (Baochen Qiang)   
  - wifi: ath12k: decrease MHI channel buffer length to 8KB (Baochen Qiang)   
  - wifi: ath12k: fix warning on DMA ring capabilities event (Baochen Qiang)   
  - wifi: ath12k: do not dump SRNG statistics during resume (Baochen Qiang)   
  - wifi: ath12k: remove MHI LOOPBACK channels (Baochen Qiang)   
  - wifi: ath12k: rearrange IRQ enable/disable in reset path (Baochen Qiang)   
  - wifi: ath12k: fix kernel crash during resume (Baochen Qiang)   
  - net: dsa: mt7530: simplify core operations (Arınç ÜNAL)   
  - net: dsa: mt7530-mdio: read PHY address of switch from device tree (Arınç ÜNAL)   
  - net: ethernet: mtk_eth_soc: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - dpaa2-switch: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - cxgb4: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: openvswitch: Check vport netdev name (Jun Gu)   
  - netfilter: nfnetlink: Handle ACK flags for batch messages (Donald Hunter)   
  - tools/net/ynl: Add multi message support to ynl (Donald Hunter)   
  - tools/net/ynl: Fix extack decoding for directional ops (Donald Hunter)   
  - doc/netlink/specs: Add draft nftables spec (Donald Hunter)   
  - net: add callback for setting a ubuf_info to skb (Pavel Begunkov)   
  - net: extend ubuf_info callback to ops structure (Pavel Begunkov)   
  - tcp: try to send bigger TSO packets (Eric Dumazet)   
  - tcp: call tcp_set_skb_tso_segs() from tcp_write_xmit() (Eric Dumazet)   
  - tcp: remove dubious FIN exception from tcp_cwnd_test() (Eric Dumazet)   
  - net/mlx5e: Implement ethtool callbacks for supporting per-queue coalescing (Rahul Rameshbabu)   
  - net/mlx5e: Support updating coalescing configuration without resetting channels (Rahul Rameshbabu)   
  - net/mlx5e: Dynamically allocate DIM structure for SQs/RQs (Rahul Rameshbabu)   
  - net/mlx5e: Use DIM constants for CQ period mode parameter (Rahul Rameshbabu)   
  - net/mlx5e: Move DIM function declarations to en/dim.h (Rahul Rameshbabu)   
  - net: dsa: vsc73xx: add structure descriptions (Pawel Dembicki)   
  - net: dsa: vsc73xx: Add define for max num of ports (Pawel Dembicki)   
  - net: dsa: vsc73xx: use macros for rgmii recognition (Pawel Dembicki)   
  - net: dsa: vsc73xx: convert to PHYLINK (Pawel Dembicki)   
  - net: dsa: vsc73xx: use read_poll_timeout instead delay loop (Pawel Dembicki)   
  - ice: Document tx_scheduling_layers parameter (Michal Wilczynski)   
  - ice: Add tx_scheduling_layers devlink param (Lukasz Czapnik)   
  - ice: Enable switching default Tx scheduler topology (Michal Wilczynski)   
  - ice: Adjust the VSI/Aggregator layers (Raj Victor)   
  - ice: Support 5 layer topology (Raj Victor)   
  - devlink: extend devlink_param *set pointer (Mateusz Polchlopek)   
  - bpf: Fix typos in comments (Rafael Passos)   
  - bpf: Fix typo in function save_aux_ptr_type (Rafael Passos)   
  - wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() (Karthikeyan Kathirvel)   
  - wifi: ath12k: Refactor data path cmem init (Karthikeyan Periyasamy)   
  - wifi: ath12k: displace the Tx and Rx descriptor in cookie conversion table (Karthikeyan Periyasamy)   
  - wifi: ath12k: Refactor the hardware cookie conversion init (Karthikeyan Periyasamy)   
  - wifi: ath12k: avoid redundant code in Rx cookie conversion init (Karthikeyan Periyasamy)   
  - tcp: do not export tcp_twsk_purge() (Eric Dumazet)   
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Geetha sowjanya)   
  - net: ethernet: ti: am65-cpsw: Fix xdp_rxq error for disabled port (Julien Panis)   
  - sysctl: treewide: constify ctl_table_header::ctl_table_arg (Thomas Weißschuh)   
  - wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor (Martin Kaistra)   
  - Revert "wifi: rtl8xxxu: enable MFP support" (Martin Kaistra)   
  - wifi: rtw88: suppress messages of failed to flush queue (Ping-Ke Shih)   
  - wifi: rtw89: 8922a: fix argument to hal_reset in bb_cfg_txrx_path (Zong-Zhe Yang)   
  - wifi: rtw89: set WIPHY_FLAG_DISABLE_WEXT before MLO (Zong-Zhe Yang)   
  - bpf, docs: Fix formatting nit in instruction-set.rst (Dave Thaler)   
  - bpf, docs: Clarify helper ID and pointer terms in instruction-set.rst (Dave Thaler)   
  - selftests: netfilter: update makefiles and kernel config (Florian Westphal)   
  - selftests: netfilter: nft_audit.sh: add more skip checks (Florian Westphal)   
  - selftests: netfilter: nft_meta.sh: small shellcheck cleanup (Florian Westphal)   
  - selftests: netfilter: nft_fib.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: xt_string.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: xt_string.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_zones_many.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_synproxy.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_queue.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_queue.sh: move to lib.sh infra (Florian Westphal)   
  - selftests/bpf: Use connect_to_addr in sk_assign (Geliang Tang)   
  - selftests/bpf: Use connect_to_addr in cls_redirect (Geliang Tang)   
  - selftests/bpf: Update arguments of connect_to_addr (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in sk_assign (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in cls_redirect (Geliang Tang)   
  - selftests/bpf: Add start_server_addr helper (Geliang Tang)   
  - neighbour: no longer hold RTNL in neigh_dump_info() (Eric Dumazet)   
  - neighbour: fix neigh_dump_info() return value (Eric Dumazet)   
  - neighbour: add RCU protection to neigh_tables[] (Eric Dumazet)   
  - net: dsa: xrs700x: fix missing initialisation of ds->phylink_mac_ops (Russell King (Oracle))   
  - net: rps: locklessly access rflow->cpu (Jason Xing)   
  - net: rps: protect filter locklessly (Jason Xing)   
  - net: rps: protect last_qtail with rps_input_queue_tail_save() helper (Jason Xing)   
  - net_sched: sch_skbprio: implement lockless skbprio_dump() (Eric Dumazet)   
  - net_sched: sch_pie: implement lockless pie_dump() (Eric Dumazet)   
  - net_sched: sch_hhf: implement lockless hhf_dump() (Eric Dumazet)   
  - net_sched: sch_hfsc: implement lockless accesses to q->defcls (Eric Dumazet)   
  - net_sched: sch_fq_pie: implement lockless fq_pie_dump() (Eric Dumazet)   
  - net_sched: sch_fq_codel: implement lockless fq_codel_dump() (Eric Dumazet)   
  - net_sched: sch_fifo: implement lockless __fifo_dump() (Eric Dumazet)   
  - net_sched: sch_ets: implement lockless ets_dump() (Eric Dumazet)   
  - net_sched: sch_tfs: implement lockless etf_dump() (Eric Dumazet)   
  - net_sched: sch_codel: implement lockless codel_dump() (Eric Dumazet)   
  - net_sched: sch_choke: implement lockless choke_dump() (Eric Dumazet)   
  - net_sched: sch_cbs: implement lockless cbs_dump() (Eric Dumazet)   
  - net_sched: cake: implement lockless cake_dump() (Eric Dumazet)   
  - net_sched: sch_fq: implement lockless fq_dump() (Eric Dumazet)   
  - wifi: mac80211: handle link ID during management Tx (Sriram R)   
  - wifi: mac80211: handle sdata->u.ap.active flag with MLO (Aditya Kumar Singh)   
  - wifi: cfg80211: add return docs for regulatory functions (Johannes Berg)   
  - wifi: cfg80211: make some regulatory functions void (Johannes Berg)   
  - wifi: mac80211: add return docs for sta_info_flush() (Johannes Berg)   
  - wifi: mac80211: keep mac80211 consistent on link activation failure (Benjamin Berg)   
  - wifi: mac80211: simplify ieee80211_assign_link_chanctx() (Johannes Berg)   
  - wifi: mac80211: reserve chanctx during find (Johannes Berg)   
  - wifi: cfg80211: fix cfg80211 function kernel-doc (Jeff Johnson)   
  - wifi: mac80211_hwsim: Use wider regulatory for custom for 6GHz tests (Chaitanya Tata)   
  - wifi: iwlwifi: mvm: Don't allow EMLSR when the RSSI is low (Miri Korenblit)   
  - wifi: iwlwifi: mvm: disable EMLSR when we suspend with wowlan (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: get periodic statistics in EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: don't recompute EMLSR mode in can_activate_links (Miri Korenblit)   
  - wifi: iwlwifi: mvm: implement EMLSR prevention mechanism. (Miri Korenblit)   
  - wifi: iwlwifi: mvm: exit EMLSR upon missed beacon (Miri Korenblit)   
  - wifi: iwlwifi: mvm: init vif works only once (Johannes Berg)   
  - wifi: iwlwifi: mvm: Add helper functions to update EMLSR status (Miri Korenblit)   
  - wifi: iwlwifi: mvm: Implement new link selection algorithm (Miri Korenblit)   
  - wifi: iwlwifi: mvm: move EMLSR/links code (Miri Korenblit)   
  - wifi: iwlwifi: mvm: check if EMLSR is allowed before selecting links (Miri Korenblit)   
  - wifi: iwlwifi: mvm: don't always disable EMLSR due to BT coex (Miri Korenblit)   
  - wifi: iwlwifi: mvm: calculate EMLSR mode after connection (Miri Korenblit)   
  - wifi: iwlwifi: mvm: implement link grading (Miri Korenblit)   
  - wifi: iwlwifi: mvm: send ap_tx_power_constraints cmd to FW in AP mode (Mukesh Sisodiya)   
  - wifi: iwlwifi: mvm: introduce esr_disable_reason (Emmanuel Grumbach)   
  - wifi: iwlwifi: Add support for LARI_CONFIG_CHANGE_CMD v10 (Anjaneyulu)   
  - wifi: iwlwifi: mvm: Add support for PPAG cmd v6 (Anjaneyulu)   
  - wifi: iwlwifi: move lari_config handlig to regulatory (Anjaneyulu)   
  - wifi: iwlwifi: add a device ID for BZ-W (Emmanuel Grumbach)   
  - wifi: iwlwifi: move WTAS macro to api file (Anjaneyulu)   
  - wifi: iwlwifi: mvm: extend STEP URM workaround for new devices (Johannes Berg)   
  - wifi: iwlwifi: mvm: move phy band to nl80211 band helper (Benjamin Berg)   
  - wifi: iwlwifi: mvm: Refactor tracking of scan UIDs (Ilan Peer)   
  - wifi: mac80211: defer link switch work in reconfig (Miri Korenblit)   
  - wifi: mac80211: transmit deauth only if link is available (Johannes Berg)   
  - scx: Fix build when !CONFIG_SCHED_CLASS_EXT (Tejun Heo)   
  - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (Bitterblue Smith)   
  - gve: Remove qpl_cfg struct since qpl_ids map with queues respectively (Ziwei Xiao)   
  - net: pse-pd: Add TI TPS23881 PSE controller driver (Kory Maincent (Dent Project))   
  - dt-bindings: net: pse-pd: Add bindings for TPS23881 PSE controller (Kory Maincent (Dent Project))   
  - net: pse-pd: Add PD692x0 PSE controller driver (Kory Maincent (Dent Project))   
  - dt-bindings: net: pse-pd: Add bindings for PD692x0 PSE controller (Kory Maincent (Dent Project))   
  - net: pse-pd: Use regulator framework within PSE framework (Kory Maincent (Dent Project))   
  - net: pse-pd: Add support for setup_pi_matrix callback (Kory Maincent (Dent Project))   
  - dt-bindings: net: pse-pd: Add another way of describing several PSE PIs (Kory Maincent (Dent Project))   
  - net: pse-pd: Add support for PSE PIs (Kory Maincent (Dent Project))   
  - MAINTAINERS: Add myself to pse networking maintainer (Kory Maincent (Dent Project))   
  - netlink: specs: Expand the pse netlink command with PoE interface (Kory Maincent (Dent Project))   
  - netlink: specs: Modify pse attribute prefix (Kory Maincent (Dent Project))   
  - net: ethtool: pse-pd: Expand pse commands with the PSE PoE interface (Kory Maincent (Dent Project))   
  - net: pse-pd: Introduce PSE types enumeration (Kory Maincent (Dent Project))   
  - ethtool: Expand Ethernet Power Equipment with c33 (PoE) alongside PoDL (Kory Maincent (Dent Project))   
  - net: dsa: sja1105: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: dsa: felix: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: mscc: ocelot: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - sfc: use flow_rule_is_supp_control_flags() (Asbjørn Sloth Tønnesen)   
  - mlxsw: spectrum_flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - selftests: net: set the exit code correctly in Python tests (Jakub Kicinski)   
  - selftests: net: fix counting totals when some checks fail (Jakub Kicinski)   
  - bpf: Fix JIT of is_mov_percpu_addr instruction. (Alexei Starovoitov)   
  - wifi: ath12k: don't use %pK in dmesg format strings (Jeff Johnson)   
  - wifi: ath12k: enable service flag for survey dump stats (Thiraviyam Mariyappan)   
  - wifi: ath12k: enable WIPHY_FLAG_DISABLE_WEXT (Kalle Valo)   
  - wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (Christophe JAILLET)   
  - wifi: ath11k: add support DT ieee80211-freq-limit (Christian Lamparter)   
  - dt-bindings: net: wireless: ath11k: add ieee80211-freq-limit property (Christian Lamparter)   
  - virtio_net: Support RX hash XDP hint (Liang Chen)   
  - net: ipa: sort all includes (Alex Elder)   
  - net: ipa: more include file cleanup (Alex Elder)   
  - net: ipa: eliminate unneeded struct declarations (Alex Elder)   
  - net: ipa: add some needed struct declarations (Alex Elder)   
  - net: ipa: include "ipa_interrupt.h" where needed (Alex Elder)   
  - net: ipa: remove unneeded standard includes (Alex Elder)   
  - net: ipa: include some standard header files (Alex Elder)   
  - ibmvnic: Return error code on TX scrq flush fail (Nick Child)   
  - neighbour: guarantee the localhost connections be established successfully even the ARP table is full (Zheng Li)   
  - udpencap: Remove Obsolete UDP_ENCAP_ESPINUDP_NON_IKE Support (Antony Antony)   
  - tcp_metrics: use parallel_ops for tcp_metrics_nl_family (Eric Dumazet)   
  - tcp_metrics: fix tcp_metrics_nl_dump() return value (Eric Dumazet)   
  - netns: no longer hold RTNL in rtnl_net_dumpid() (Eric Dumazet)   
  - net: dsa: xrs700x: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: rzn1_a5psw: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: lan9303: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: bcm_sf2: provide own phylink MAC operations (Russell King (Oracle))   
  - selftests: openvswitch: Fix escape chars in regexp. (Adrian Moreno)   
  - net: netdevsim: select PAGE_POOL in Kconfig (Jakub Kicinski)   
  - net: usb: qmi_wwan: add Lonsung U8300/U9300 product (Coia Prant)   
  - selftests: adopt BPF's approach to quieter builds (Jakub Kicinski)   
  - wifi: rtw89: regd: handle policy of 6 GHz SP according to BIOS (Zong-Zhe Yang)   
  - wifi: rtw89: acpi: process 6 GHz SP policy from ACPI DSM (Zong-Zhe Yang)   
  - wifi: rtw89: regd: extend policy of UNII-4 for IC regulatory (Zong-Zhe Yang)   
  - wifi: rtw89: regd: block 6 GHz by policy if not specific country (Zong-Zhe Yang)   
  - wifi: rtw89: 8852c: update TX power tables to R69.1 (2 of 2) (Zong-Zhe Yang)   
  - wifi: rtw89: 8852c: update TX power tables to R69.1 (1 of 2) (Zong-Zhe Yang)   
  - wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (Zong-Zhe Yang)   
  - wifi: rtw89: sar: correct TX power boundary for MAC domain (Zong-Zhe Yang)   
  - wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command (Ping-Ke Shih)   
  - ice: Remove ndo_get_phys_port_name (Dariusz Aftanski)   
  - ice: Add automatic VF reset on Tx MDD events (Marcin Szycik)   
  - libbpf: Fix dump of subsequent char arrays (Quentin Deslandes)   
  - libbpf: Fix misaligned array closing bracket (Quentin Deslandes)   
  - tcp: accept bare FIN packets under memory pressure (Eric Dumazet)   
  - selftests: fix netfilter path in Makefile (Yujie Liu)   
  - net: phy: mediatek-ge: do not disable EEE advertisement (Arınç ÜNAL)   
  - net: pse-pd: Rectify and adapt the naming of admin_cotrol member of struct pse_control_config (Kory Maincent (Dent Project))   
  - of: property: Add fw_devlink support for pse parent (Kory Maincent (Dent Project))   
  - MAINTAINERS: net: Add Oleksij to pse-pd maintainers (Kory Maincent (Dent Project))   
  - selftests: drv-net: add config for netdevsim (Jakub Kicinski)   
  - selftests: drv-net: add stdout to the command failed exception (Jakub Kicinski)   
  - ip6_vti: fix memleak on netns dismantle (Florian Westphal)   
  - dt-bindings: net: nxp,dwmac-imx: allow nvmem cells property (Peng Fan)   
  - net: ipa: Remove unnecessary print function dev_err() (Jiapeng Chong)   
  - net/handshake: remove redundant assignment to variable ret (Colin Ian King)   
  - net: dsa: microchip: drop unneeded MODULE_ALIAS (Krzysztof Kozlowski)   
  - bpftool: Address minor issues in bash completion (Quentin Monnet)   
  - bpftool: Update documentation where progs/maps can be passed by name (Quentin Monnet)   
  - bpf: Harden and/or/xor value tracking in verifier (Harishankar Vishwanathan)   
  - wifi: wilc1000: convert list management to RCU (Alexis Lothoré)   
  - wifi: wilc1000: set atomic flag on kmemdup in srcu critical section (Alexis Lothoré)   
  - bpf, tests: Fix typos in comments (Chen Pei)   
  - btf: Avoid weak external references (Ard Biesheuvel)   
  - af_unix: Try not to hold unix_gc_lock during accept(). (Kuniyuki Iwashima)   
  - selftests: forwarding: router_nh: Add a diagram (Petr Machata)   
  - selftests: forwarding: router_mpath_nh_res: Add a diagram (Petr Machata)   
  - selftests: forwarding: router_mpath_nh: Add a diagram (Petr Machata)   
  - selftests: mlxsw: ethtool_lanes: Wait for lanes parameter dump explicitly (Danielle Ratson)   
  - selftests: drivers: hw: Include tc_common.sh in hw_stats_l3 (Petr Machata)   
  - selftests: drivers: hw: ethtool.sh: Adjust output (Petr Machata)   
  - selftests: drivers: hw: Fix ethtool_rmon (Petr Machata)   
  - selftests: forwarding: bail_on_lldpad() should SKIP (Petr Machata)   
  - selftests: forwarding: lib.sh: Validate NETIFS (Petr Machata)   
  - selftests: net: Unify code of busywait() and slowwait() (Petr Machata)   
  - net: dsa: mt7530: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: lantiq_gswip: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: qca8k: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: ar9331: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: sja1105: provide own phylink MAC operations (Russell King (Oracle))   
  - wifi: ath12k: dynamically update peer puncturing bitmap for STA (Kang Yang)   
  - wifi: ath12k: fix mac id extraction when MSDU spillover in rx error path (Karthikeyan Periyasamy)   
  - selftests: net: exercise page pool reporting via netlink (Jakub Kicinski)   
  - selftests: net: support use of NetdevSimDev under "with" in python (Jakub Kicinski)   
  - selftests: net: print full exception on failure (Jakub Kicinski)   
  - selftests: net: print report check location in python tests (Jakub Kicinski)   
  - tools: ynl: don't return None for dumps (Jakub Kicinski)   
  - net: netdevsim: add some fake page pool use (Jakub Kicinski)   
  - net: dqs: make struct dql more cache efficient (Breno Leitao)   
  - net: dql: Optimize stall information population (Breno Leitao)   
  - net: dql: Separate queue function responsibilities (Breno Leitao)   
  - net: dql: Avoid calling BUG() when WARN() is enough (Breno Leitao)   
  - net: ethernet: ti: am65-cpsw: Add minimal XDP support (Julien Panis)   
  - net: ethernet: ti: Add desc_infos member to struct k3_cppi_desc_pool (Julien Panis)   
  - net: ethernet: ti: Add accessors for struct k3_cppi_desc_pool members (Julien Panis)   
  - udp: Avoid call to compute_score on multiple sites (Gabriel Krisman Bertazi)   
  - net: ip6_gre: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - net: ipv6_gre: Do not use custom stat allocator (Breno Leitao)   
  - net: dsa: convert dsa_user_phylink_fixed_state() to use dsa_phylink_to_port() (Russell King (Oracle))   
  - net: constify net_class (Heiner Kallweit)   
  - gve: Correctly report software timestamping capabilities (John Fraker)   
  - net: save some cycles when doing skb_attempt_defer_free() (Jason Xing)   
  - net: dsa: microchip: ksz9477: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: prestera: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - nfp: flower: fix check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - flow_offload: add control flag checking helpers (Asbjørn Sloth Tønnesen)   
  - net: dev_addr_lists: move locking out of init/exit in kunit (Jakub Kicinski)   
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa)   
  - fib: rules: no longer hold RTNL in fib_nl_dumprule() (Eric Dumazet)   
  - tipc: remove redundant assignment to ret, simplify code (Colin Ian King)   
  - tcp: small optimization when TCP_TW_SYN is processed (Eric Dumazet)   
  - net: hns3: add support to query scc version by devlink info (Hao Chen)   
  - net: hns3: dump more reg info based on ras mod (Peiyang Wang)   
  - net: hns3: move constants from hclge_debugfs.h to hclge_debugfs.c (Jijie Shao)   
  - net: hns3: add command queue trace for hns3 (Hao Lan)   
  - net: nfc: remove inappropriate attrs check (Lin Ma)   
  - ptp: ptp_qoriq: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_ines: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_idt82p33: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_dte: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_clockmatrix: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - selftests: netfilter: nft_nat.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_fib.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: ipvs.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: place checktool helper in lib.sh (Florian Westphal)   
  - selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: br_netfilter.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: bridge_brouter.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: move to net subdir (Florian Westphal)   
  - ice: store VF relative MSI-X index in q_vector->vf_reg_idx (Jacob Keller)   
  - ice: set vf->num_msix in ice_initialize_vf_entry() (Jacob Keller)   
  - ice: Implement 'flow-type ether' rules (Jakub Buchocki)   
  - ice: Remove unnecessary argument from ice_fdir_comp_rules() (Lukasz Plachno)   
  - scx: Mark sched_ext uclamp enabled (Tejun Heo)   
  - selftests/bpf: Add read_trace_pipe_iter function (Jiri Olsa)   
  - bpftool: Fix typo in error message (Thorsten Blum)   
  - nfp: update devlink device info output (Fei Qin)   
  - devlink: add a new info version tag (Fei Qin)   
  - tcp: increase the default TCP scaling ratio (Hechao Li)   
  - net: sfp: add quirk for another multigig RollBall transceiver (Marek Behún)   
  - net: phy: realtek: add rtl822x_c45_get_features() to set supported port (Eric Woudstra)   
  - net: phy: realtek: Change rtlgen_get_speed() to rtlgen_decode_speed() (Eric Woudstra)   
  - net: phy: realtek: Add driver instances for rtl8221b via Clause 45 (Marek Behún)   
  - net: phy: realtek: add get_rate_matching() for rtl822xb PHYs (Eric Woudstra)   
  - net: phy: realtek: configure SerDes mode for rtl822xb PHYs (Alexander Couzens)   
  - scx: Implement scx_bpf_cpuperf_set() (Tejun Heo)   
  - scx: Implement scx_bpf_cpuperf_cap() and scx_bpf_cpuperf_cur() (Tejun Heo)   
  - scx: Implement sched_ext_ops.tick() (Tejun Heo)   
  - cpufreq_schedutil: Refactor sugov_cpu_is_busy() (Tejun Heo)   
  - scx: Should update load avg and util metrics for other classes and mechanisms (Tejun Heo)   
  - sched: Factor out update_other_load_avgs() from __update_blocked_others() (Tejun Heo)   
  - scx: Uninline scx_notify_sched_tick() and scx_notify_pick_next_task() (Tejun Heo)   
  - scx_qmap: Add struct cpu_ctx (Tejun Heo)   
  - net: dsa: mv88e6xxx: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: allow DSA switch drivers to provide their own phylink mac ops (Russell King (Oracle))   
  - net: dsa: introduce dsa_phylink_to_port() (Russell King (Oracle))   
  - tls: remove redundant assignment to variable decrypted (Colin Ian King)   
  - ipv4: Remove RTO_ONLINK. (Guillaume Nault)   
  - tcp: add support for SO_PEEK_OFF socket option (Jon Maloy)   
  - net: usb: qmi_wwan: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - net: usb: qmi_wwan: Leverage core stats allocator (Breno Leitao)   
  - mpls: no longer hold RTNL in mpls_netconf_dump_devconf() (Eric Dumazet)   
  - flow_offload: fix flow_offload_has_one_action() kdoc (Asbjørn Sloth Tønnesen)   
  - net/mlx5e: Expose the VF/SF RX drop counter on the representor (Carolina Jubran)   
  - net: mirror skb frag ref/unref helpers (Mina Almasry)   
  - net: move skb ref helpers to new header (Mina Almasry)   
  - scx: Add selftests for validating hotplug seq checks (David Vernet)   
  - scx: Add new macros to compat.h (David Vernet)   
  - scx: Add hotplug seq to sched_ext_ops (David Vernet)   
  - scx: Add hotplug sequence number (David Vernet)   
  - selftests/bpf: Export send_recv_data helper (Geliang Tang)   
  - selftests/bpf: Add struct send_recv_arg (Geliang Tang)   
  - selftests/bpf: Fix umount cgroup2 error in test_sockmap (Geliang Tang)   
  - selftests: mptcp: test last time mptcp_info (Geliang Tang)   
  - mptcp: add last time fields in mptcp_info (Geliang Tang)   
  - net: mana: Avoid open coded arithmetic (Erick Archer)   
  - RDMA/mana_ib: Prefer struct_size over open coded arithmetic (Erick Archer)   
  - net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (Erick Archer)   
  - selftests/bpf: Enable tests for atomics with cpuv4 (Yonghong Song)   
  - bnxt_en: Update MODULE_DESCRIPTION (Michael Chan)   
  - bnxt_en: Utilize ulp client resources if RoCE is not registered (Vikas Gupta)   
  - bnxt_en: Change MSIX/NQs allocation policy (Vikas Gupta)   
  - bnxt_en: Refactor bnxt_rdma_aux_device_init/uninit functions (Vikas Gupta)   
  - bnxt_en: Remove unneeded MSIX base structure fields and code (Vikas Gupta)   
  - bnxt_en: Remove a redundant NULL check in bnxt_register_dev() (Kalesh AP)   
  - bnxt_en: Skip ethtool RSS context configuration in ifdown state (Pavan Chebbi)   
  - selftests/bpf: Add some tests with new bpf_program__attach_sockmap() APIs (Yonghong Song)   
  - selftests/bpf: Refactor out helper functions for a few tests (Yonghong Song)   
  - bpftool: Add link dump support for BPF_LINK_TYPE_SOCKMAP (Yonghong Song)   
  - libbpf: Add bpf_link support for BPF_PROG_TYPE_SOCKMAP (Yonghong Song)   
  - bpf: Add bpf_link support for sk_msg and sk_skb progs (Yonghong Song)   
  - mlxsw: spectrum_ethtool: Add support for 100Gb/s per lane link modes (Ido Schimmel)   
  - selftests: fib_rule_tests: Add VRF tests (Ido Schimmel)   
  - net: team: fix incorrect maxattr (Hangbin Liu)   
  - net: wan: fsl_qmc_hdlc: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - doc/netlink/specs: Add bond support to rt_link.yaml (Hangbin Liu)   
  - ethtool: update tsinfo statistics attribute docs with correct type (Rahul Rameshbabu)   
  - net: use SKB_CONSUMED in skb_attempt_defer_free() (Pavel Begunkov)   
  - net: cache for same cpu skb_attempt_defer_free (Pavel Begunkov)   
  - tcp: tweak tcp_sock_write_txrx size assertion (Eric Dumazet)   
  - selftests: net: reuse common code in bpf_offload (Jakub Kicinski)   
  - selftests: net: declare section names for bpf_offload (Jakub Kicinski)   
  - selftests: net: bpf_offload: wait for maps (Jakub Kicinski)   
  - selftests: move bpf-offload test from bpf to net (Jakub Kicinski)   
  - scx: Fix a few typos (David Vernet)   
  - scx: Add scx_bpf_nr_cpu_ids(), scx_bpf_get_possible/online_cpumask() and scx_put_cpumask() (Tejun Heo)   
  - scx: Move defs of sched_ext_ops and friends to ext.c (Tejun Heo)   
  - scx: Make ops_cpu_valid() invoke scx_ops_error() automtically (Tejun Heo)   
  - scx: Reorder kfunc decls in common.bpf.h (Tejun Heo)   
  - scx: Fix allocation of scx_kick_cpus_pnt_seqs[] (Tejun Heo)   
  - wifi: ath12k: support get_survey mac op for single wiphy (Sriram R)   
  - wifi: ath12k: Modify rts threshold mac op for single wiphy (Sriram R)   
  - wifi: ath12k: Modify set and get antenna mac ops for single wiphy (Sriram R)   
  - wifi: ath12k: modify regulatory support for single wiphy architecture (Sriram R)   
  - wifi: ath12k: Add additional checks for vif and sta iterators (Sriram R)   
  - wifi: ath12k: Cache vdev configs before vdev create (Sriram R)   
  - wifi: ath12k: fetch correct radio based on vdev status (Sriram R)   
  - wifi: ath12k: scan statemachine changes for single wiphy (Sriram R)   
  - wifi: ath12k: vdev statemachine changes for single wiphy (Sriram R)   
  - wifi: ath12k: modify ath12k mac start/stop ops for single wiphy (Sriram R)   
  - wifi: ath12k: Modify add and remove chanctx ops for single wiphy support (Sriram R)   
  - wifi: ath12k: add multiple radio support in a single MAC HW un/register (Karthikeyan Periyasamy)   
  - wifi: brcmfmac: Fix spelling mistake "ivalid" -> "invalid" (Colin Ian King)   
  - net: sched: cls_api: fix slab-use-after-free in fl_dump_key (Jianbo Liu)   
  - scx: Add selftests for hotplug operations (David Vernet)   
  - scx: Add more user_exit_info macros for exit code (David Vernet)   
  - scx: Exit a scheduler for unhandled hotplug events (David Vernet)   
  - net: remove napi_frag_unref (Mina Almasry)   
  - net: make napi_frag_unref reuse skb_page_unref (Mina Almasry)   
  - bonding: no longer use RTNL in bonding_show_queue_id() (Eric Dumazet)   
  - bonding: no longer use RTNL in bonding_show_slaves() (Eric Dumazet)   
  - bonding: no longer use RTNL in bonding_show_bonds() (Eric Dumazet)   
  - net: sched: cake: Optimize the number of function calls and branches in heap construction (Kuan-Wei Chiu)   
  - cxgb4: flower: use NL_SET_ERR_MSG_MOD for validation errors (Asbjørn Sloth Tønnesen)   
  - net: phy: dp8382x: keep WOL settings across suspends (Catalin Popescu)   
  - selftests/bpf: Add tests for atomics in bpf_arena. (Alexei Starovoitov)   
  - bpf: Add support for certain atomics in bpf_arena to x86 JIT (Alexei Starovoitov)   
  - wifi: ath12k: correct the capital word typo (Karthikeyan Periyasamy)   
  - wifi: ath11k: support hibernation (Baochen Qiang)   
  - net: qrtr: support suspend/hibernation (Baochen Qiang)   
  - net: phy: micrel: lan8814: Add support for PTP_PF_PEROUT (Horatiu Vultur)   
  - net: phy: micrel: lan8814: Enable LTC at probe time (Horatiu Vultur)   
  - dt-bindings: net: rockchip-dwmac: use rgmii-id in example (Sascha Hauer)   
  - tcp: replace TCP_SKB_CB(skb)->tcp_tw_isn with a per-cpu field (Eric Dumazet)   
  - tcp: propagate tcp_tw_isn via an extra parameter to ->route_req() (Eric Dumazet)   
  - net: sparx5: add support for tc flower redirect action (Daniel Machon)   
  - net: sparx5: add support for tc flower mirred action. (Daniel Machon)   
  - net: ti: icssg-prueth: Add ICSSG Ethernet driver for AM65x SR1.0 platforms (Diogo Ivo)   
  - net: ti: icssg-prueth: Modify common functions for SR1.0 (Diogo Ivo)   
  - net: ti: icssg-prueth: Add functions to configure SR1.0 packet classifier (Diogo Ivo)   
  - net: ti: icssg-prueth: Adjust the number of TX channels for SR1.0 (Diogo Ivo)   
  - net: ti: icssg-prueth: Adjust IPG configuration for SR1.0 (Diogo Ivo)   
  - net: ti: icssg-prueth: Add SR1.0-specific description bits (Diogo Ivo)   
  - net: ti: icssg-prueth: Add SR1.0-specific configuration bits (Diogo Ivo)   
  - net: ti: icssg-prueth: Move common functions into a separate file (Diogo Ivo)   
  - eth: Move IPv4/IPv6 multicast address bases to their own symbols (Diogo Ivo)   
  - dt-bindings: net: Add support for AM65x SR1.0 in ICSSG (Diogo Ivo)   
  - net: phy: air_en8811h: fix some error codes (Dan Carpenter)   
  - archnet: Convert from tasklet to BH workqueue (Allen Pais)   
  - scx: Add scx_ops_exit() macro for exiting from ext.c (David Vernet)   
  - selftests/bpf: eliminate warning of get_cgroup_id_from_path() (Jason Xing)   
  - igc: Remove redundant runtime resume for ethtool ops (Bjorn Helgaas)   
  - igb: Remove redundant runtime resume for ethtool_ops (Bjorn Helgaas)   
  - e1000e: Remove redundant runtime resume for ethtool_ops (Bjorn Helgaas)   
  - wifi: mac80211: extend IEEE80211_KEY_FLAG_GENERATE_MMIE to other ciphers (Michael-CY Lee)   
  - wifi: mac80211: Add missing return value documentation (Jeff Johnson)   
  - wifi: mac80211: remove ieee80211_set_hw_80211_encap() (Jeff Johnson)   
  - wifi: mac80211: correctly document struct mesh_table (Jeff Johnson)   
  - wifi: ath12k: fix link capable flags (Karthikeyan Periyasamy)   
  - wifi: ath12k: extend the link capable flag (Karthikeyan Periyasamy)   
  - r8169: add support for RTL8168M (Heiner Kallweit)   
  - mlx5/core: Support max_io_eqs for a function (Parav Pandit)   
  - devlink: Support setting max_io_eqs (Parav Pandit)   
  - net: display more skb fields in skb_dump() (Eric Dumazet)   
  - net: lan743x: Fixup EEE (Andrew Lunn)   
  - net: usb: lan78xx: Fixup EEE (Andrew Lunn)   
  - mptcp: add reset reason options in some places (Jason Xing)   
  - ipv4: Set scope explicitly in ip_route_output(). (Guillaume Nault)   
  - ipvlan: handle NETDEV_DOWN event (Venkat Venkatsubra)   
  - af_packet: avoid a false positive warning in packet_setsockopt() (Eric Dumazet)   
  - net: handle HAS_IOPORT dependencies (Niklas Schnelle)   
  - selftests: mptcp: netlink: drop disable=SC2086 (Geliang Tang)   
  - selftests: mptcp: ip_mptcp option for more scripts (Geliang Tang)   
  - selftests: mptcp: use pm_nl endpoint ops (Geliang Tang)   
  - selftests: mptcp: export pm_nl endpoint ops (Geliang Tang)   
  - selftests: mptcp: join: update endpoint ops (Geliang Tang)   
  - selftests: mptcp: netlink: add change_address helper (Geliang Tang)   
  - selftests: mptcp: add {get,format}_endpoint(s) helpers (Geliang Tang)   
  - selftests: mptcp: netlink: add 'limits' helpers (Geliang Tang)   
  - selftests: mptcp: export ip_mptcp to mptcp_lib (Geliang Tang)   
  - selftests: mptcp: add ms units for tc-netem delay (Geliang Tang)   
  - selftests: mptcp: add tc check for check_tools (Geliang Tang)   
  - tcp: more struct tcp_sock adjustments (Eric Dumazet)   
  - net: usb: ax88179_178a: non necessary second random mac address (Jose Ignacio Tornos Martinez)   
  - pfcp: avoid copy warning by simplifing code (Michal Swiatkowski)   
  - testing: net-drv: add a driver test for stats reporting (Jakub Kicinski)   
  - selftests: drivers: add scaffolding for Netlink tests in Python (Jakub Kicinski)   
  - netdevsim: report stats by default, like a real device (Jakub Kicinski)   
  - selftests: nl_netdev: add a trivial Netlink netdev test (Jakub Kicinski)   
  - selftests: net: add scaffolding for Netlink tests in Python (Jakub Kicinski)   
  - net: mdio-gpio: Use device_is_compatible() (Andy Shevchenko)   
  - net: dqs: use sysfs_emit() in favor of sprintf() (Eric Dumazet)   
  - ip_tunnel: harden copying IP tunnel params to userspace (Alexander Lobakin)   
  - ipv6: remove RTNL protection from ip6addrlbl_dump() (Eric Dumazet)   
  - inet: frags: delay fqdir_free_fn() (Eric Dumazet)   
  - ip6_vti: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - ip6_vti: Do not use custom stat allocator (Breno Leitao)   
  - scx: Spaces -> tabs in a couple places (David Vernet)   
  - net: ethtool: Allow passing a phy index for some commands (Maxime Chevallier)   
  - net: sfp: Add helper to return the SFP bus name (Maxime Chevallier)   
  - net: phy: add helpers to handle sfp phy connect/disconnect (Maxime Chevallier)   
  - net: sfp: pass the phy_device when disconnecting an sfp module's PHY (Maxime Chevallier)   
  - net: phy: Introduce ethernet link topology representation (Maxime Chevallier)   
  - net: phy: marvell: implement cable test for 88E1111 (Pawel Dembicki)   
  - netlink: add nlmsg_consume() and use it in devlink compat (Jakub Kicinski)   
  - net: skbuff: generalize the skb->decrypted bit (Jakub Kicinski)   
  - libbpf: Add ring__consume_n / ring_buffer__consume_n (Andrea Righi)   
  - libbpf: ringbuf: Allow to consume up to a certain amount of items (Andrea Righi)   
  - libbpf: Start v1.5 development cycle (Andrea Righi)   
  - ynl: support binary and integer sub-type for indexed-array (Hangbin Liu)   
  - ynl: rename array-nest to indexed-array (Hangbin Liu)   
  - tcp: annotate data-races around tp->window_clamp (Eric Dumazet)   
  - tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation (Rahul Rameshbabu)   
  - netlink: specs: ethtool: define header-flags as an enum (Jakub Kicinski)   
  - net/mlx5e: Implement ethtool hardware timestamping statistics (Rahul Rameshbabu)   
  - net/mlx5e: Introduce timestamps statistic counter for Tx DMA layer (Rahul Rameshbabu)   
  - net/mlx5e: Introduce lost_cqe statistic counter for PTP Tx port timestamping CQ (Rahul Rameshbabu)   
  - ethtool: add interface to read Tx hardware timestamping statistics (Rahul Rameshbabu)   
  - net: xgbe: remove extraneous #ifdef checks (Arnd Bergmann)   
  - isdn: kcapi: don't build unused procfs code (Arnd Bergmann)   
  - 3c515: remove unused 'mtu' variable (Arnd Bergmann)   
  - trace: events: cleanup deprecated strncpy uses (Justin Stitt)   
  - net/mlx5e: Un-expose functions in en.h (Tariq Toukan)   
  - net/mlx5e: Support FEC settings for 100G/lane modes (Cosmin Ratiu)   
  - net/mlx5e: Extract checking of FEC support for a link mode (Cosmin Ratiu)   
  - bnxt_en: Fix PTP firmware timeout parameter (Michael Chan)   
  - selftests/bpf: Verify calling core kfuncs from BPF_PROG_TYPE_SYCALL (David Vernet)   
  - bpf: Allow invoking kfuncs from BPF_PROG_TYPE_SYSCALL progs (David Vernet)   
  - bpf, docs: Editorial nits in instruction-set.rst (Dave Thaler)   
  - selftests/bpf: Make sure libbpf doesn't enforce the signature of a func pointer. (Kui-Feng Lee)   
  - selftests/bpf: add test for bpf_for_each_map_elem() with different maps (Philo Lu)   
  - bpf: allow invoking bpf_for_each_map_elem with different maps (Philo Lu)   
  - bpf: store both map ptr and state in bpf_insn_aux_data (Philo Lu)   
  - scx: Fix trivial grammatical typo (David Vernet)   
  - scx: Cosmetic changes to kfuncs (Tejun Heo)   
  - bpf: fix perf_snapshot_branch_stack link failure (Arnd Bergmann)   
  - wifi: ath10k: support board-specific firmware overrides (Dmitry Baryshkov)   
  - dt-bindings: net: wireless: ath10k: describe firmware-name property (Dmitry Baryshkov)   
  - wifi: mwifiex: replace open-coded module_sdio_driver() (Krzysztof Kozlowski)   
  - wifi: wilc1000: replace open-coded module_sdio_driver() (Krzysztof Kozlowski)   
  - wifi: wl1251: simplify module initialization (Krzysztof Kozlowski)   
  - wifi: rsi: sdio: simplify module initialization (Krzysztof Kozlowski)   
  - net: dsa: microchip: ksz8_r_dyn_mac_table(): use entries variable to signal 0 entries (Oleksij Rempel)   
  - net: dsa: microchip: ksz8_r_dyn_mac_table(): return read/write error if we got any (Oleksij Rempel)   
  - net: dsa: microchip: ksz8_r_dyn_mac_table(): ksz: do not return EAGAIN on timeout (Oleksij Rempel)   
  - net: dsa: microchip: ksz8: Unify variable naming in ksz8_r_dyn_mac_table() (Oleksij Rempel)   
  - net: dsa: microchip: ksz8: Refactor ksz8_r_dyn_mac_table() for readability (Oleksij Rempel)   
  - net: dsa: microchip: ksz8: Refactor ksz8_fdb_dump() (Oleksij Rempel)   
  - net: dsa: microchip: Make ksz8_r_dyn_mac_table() static (Oleksij Rempel)   
  - net: dsa: microchip: Remove unused FDB timestamp support in ksz8_r_dyn_mac_table() (Oleksij Rempel)   
  - dt-bindings: net: starfive,jh7110-dwmac: Add StarFive JH8100 support (Tan Chun Hau)   
  - selftests/bpf: add fp-leaking precise subprog result tests (Andrii Nakryiko)   
  - bpf: prevent r10 register from being marked as precise (Andrii Nakryiko)   
  - bpf: Pack struct bpf_fib_lookup (Anton Protopopov)   
  - bpftool: Mount bpffs on provided dir instead of parent dir (Sahil Siddiq)   
  - scx: Use __COMPAT_ENUM_OR_ZERO for reading exit values (David Vernet)   
  - bpf: inline bpf_get_branch_snapshot() helper (Andrii Nakryiko)   
  - bpf: make bpf_get_branch_snapshot() architecture-agnostic (Andrii Nakryiko)   
  - scx: Update minimal testcase to be completely minimal (David Vernet)   
  - scx: Add a few missing config options from selftests (David Vernet)   
  - tools: ynl: copy netlink error to NlError (Jakub Kicinski)   
  - netlink: specs: define ethtool header flags (Jakub Kicinski)   
  - bnxt_en: Add warning message about disallowed speed change (Sreekanth Reddy)   
  - bnxt_en: Update firmware interface to 1.10.3.39 (Pavan Chebbi)   
  - bnxt_en: Add XDP Metadata support (Somnath Kotur)   
  - bnxt_en: Change bnxt_rx_xdp function prototype (Somnath Kotur)   
  - bnxt_en: Allocate page pool per numa node (Somnath Kotur)   
  - bnxt_en: Enable XPS by default on driver load (Somnath Kotur)   
  - bnxt_en: Add delay to handle Downstream Port Containment (DPC) AER (Vikas Gupta)   
  - bpf, riscv: Implement bpf_addr_space_cast instruction (Puranjay Mohan)   
  - bpf, riscv: Implement PROBE_MEM32 pseudo instructions (Puranjay Mohan)   
  - bpf: Optimize emit_mov_imm64(). (Alexei Starovoitov)   
  - net: ethernet: mtk_eth_soc: Reuse value using READ_ONCE instead of re-rereading it (linke li)   
  - wifi: ath6kl: sdio: simplify module initialization (Krzysztof Kozlowski)   
  - wifi: wil6210: wmi: Use __counted_by() in struct wmi_set_link_monitor_cmd and avoid -Wfamnae warning (Gustavo A. R. Silva)   
  - wifi: wil6210: cfg80211: Use __counted_by() in struct wmi_start_scan_cmd and avoid some -Wfamnae warnings (Gustavo A. R. Silva)   
  - wifi: ath12k: fix hal_rx_buf_return_buf_manager documentation (Jeff Johnson)   
  - wifi: ath11k: fix hal_rx_buf_return_buf_manager documentation (Jeff Johnson)   
  - wifi: ath9k: work around memset overflow warning (Arnd Bergmann)   
  - wifi: carl9170: re-fix fortified-memset warning (Arnd Bergmann)   
  - wifi: ath12k: fix missing endianness conversion in wmi_vdev_create_cmd() (Miaoqing Pan)   
  - wifi: ath12k: debugfs: radar simulation support (Ramya Gnanasekar)   
  - wifi: ath12k: initial debugfs support (Ramasamy Kaliappan)   
  - tg3: Remove residual error handling in tg3_suspend (Nikita Kiryushin)   
  - wifi: rtw89: 8922a: configure UL MU/OFDMA power setting (Kuan-Chung Chen)   
  - wifi: rtw88: Set default CQM config if not present (Po-Hao Huang)   
  - bpf: handle CONFIG_SMP=n configuration in x86 BPF JIT (Andrii Nakryiko)   
  - mlxsw: pci: Store DQ pointer as part of CQ structure (Amit Cohen)   
  - mlxsw: pci: Remove mlxsw_pci_cq_count() (Amit Cohen)   
  - mlxsw: pci: Remove mlxsw_pci_sdq_count() (Amit Cohen)   
  - mlxsw: pci: Break mlxsw_pci_cq_tasklet() into tasklets per queue type (Amit Cohen)   
  - mlxsw: pci: Make style change in mlxsw_pci_cq_tasklet() (Amit Cohen)   
  - mlxsw: pci: Remove unused wait queue (Amit Cohen)   
  - mlxsw: pci: Use only one event queue (Amit Cohen)   
  - mlxsw: pci: Rename MLXSW_PCI_EQS_COUNT (Amit Cohen)   
  - mlxsw: pci: Poll command interface for each cmd_exec() (Amit Cohen)   
  - mlxsw: pci: Make style changes in mlxsw_pci_eq_tasklet() (Amit Cohen)   
  - mlxsw: pci: Remove unused counters (Amit Cohen)   
  - mlxsw: pci: Arm CQ doorbell regardless of number of completions (Amit Cohen)   
  - mlxsw: pci: Do not setup tasklet from operation (Amit Cohen)   
  - mlxsw: pci: Move mlxsw_pci_cq_{init, fini}() (Amit Cohen)   
  - mlxsw: pci: Move mlxsw_pci_eq_{init, fini}() (Amit Cohen)   
  - net/mlx5: Don't call give_pages() if request 0 page (Jianbo Liu)   
  - net/mlx5: Skip pages EQ creation for non-page supplier function (Jianbo Liu)   
  - net/mlx5: Support matching on l4_type for ttc_table (Jianbo Liu)   
  - net/mlx5e: Add support for 800Gbps link modes (Gal Pressman)   
  - net/mlx5: Convert uintX_t to uX (Gal Pressman)   
  - net/mlx5e: XDP, Fix an inconsistent comment (Carolina Jubran)   
  - net/mlx5e: debugfs, Add reset option for command interface stats (Tariq Toukan)   
  - net/mlx5e: Make stats group fill_stats callbacks consistent with the API (Gal Pressman)   
  - net/mlx5e: Use ethtool_sprintf/puts() to fill stats strings (Gal Pressman)   
  - net/mlx5e: Use ethtool_sprintf/puts() to fill selftests strings (Gal Pressman)   
  - net/mlx5e: Use ethtool_sprintf/puts() to fill priv flags strings (Gal Pressman)   
  - tools: ynl: ethtool.py: Make tool invokable from any CWD (Rahul Rameshbabu)   
  - net: phy: marvell: implement cable-test for 88E308X/88E609X family (Pawel Dembicki)   
  - net: ethtool: Add impedance mismatch result code to cable test (Pawel Dembicki)   
  - net: phy: marvell: add basic support of 88E308X/88E609X family (Pawel Dembicki)   
  - net: fman: Remove some unused fields in some structure (Christophe JAILLET)   
  - af_unix: Remove lock dance in unix_peek_fds(). (Kuniyuki Iwashima)   
  - af_unix: Remove scm_fp_dup() in unix_attach_fds(). (Kuniyuki Iwashima)   
  - trace: tcp: fully support trace_tcp_send_reset (Jason Xing)   
  - trace: adjust TP_STORE_ADDR_PORTS_SKB() parameters (Jason Xing)   
  - net: enable timestamp static key if CPU (Marcelo Tosatti)   
  - scx/selftest: Add testcase invoking a kfunc with BPF_PROG_RUN (David Vernet)   
  - scx: Allow calling scx kfuncs from BPF_PROG_TYPE_SYSCALL (David Vernet)   
  - bpf: inline bpf_map_lookup_elem() helper for PERCPU_HASH map (Andrii Nakryiko)   
  - bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps (Andrii Nakryiko)   
  - bpf: inline bpf_get_smp_processor_id() helper (Andrii Nakryiko)   
  - bpf: add special internal-only MOV instruction to resolve per-CPU addrs (Andrii Nakryiko)   
  - bpf: Replace deprecated strncpy with strscpy (Justin Stitt)   
  - selftests/xsk: Add new test case for AF_XDP under max ring sizes (Tushar Vyavahare)   
  - selftests/xsk: Test AF_XDP functionality under minimal ring configurations (Tushar Vyavahare)   
  - selftests/xsk: Introduce set_ring_size function with a retry mechanism for handling AF_XDP socket closures (Tushar Vyavahare)   
  - selftests/bpf: Implement set_hw_ring_size function to configure interface ring size (Tushar Vyavahare)   
  - selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size (Tushar Vyavahare)   
  - selftests/xsk: Make batch size variable (Tushar Vyavahare)   
  - tools: Add ethtool.h header to tooling infra (Tushar Vyavahare)   
  - gve: add support to change ring size via ethtool (Harshitha Ramamurthy)   
  - gve: add support to read ring size ranges from the device (Harshitha Ramamurthy)   
  - gve: set page count for RX QPL for GQI and DQO queue formats (Harshitha Ramamurthy)   
  - gve: make the completion and buffer ring size equal for DQO (Harshitha Ramamurthy)   
  - gve: simplify setting decriptor count defaults (Harshitha Ramamurthy)   
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna)   
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - netdevice: add DEFINE_FREE() for dev_put (Johannes Berg)   
  - rtnetlink: add guard for RTNL (Johannes Berg)   
  - wifi: rtw88: remove unsupported interface type of mesh point (Ping-Ke Shih)   
  - bpf: Add arm64 JIT support for bpf_addr_space_cast instruction. (Puranjay Mohan)   
  - bpf: Add arm64 JIT support for PROBE_MEM32 pseudo instructions. (Puranjay Mohan)   
  - wifi: rtw89: 8852c: disable PCI PHY EQ to improve compatibility (Ping-Ke Shih)   
  - wifi: rtw89: 8852c: add quirk to set PCI BER for certain platforms (Ping-Ke Shih)   
  - wifi: rtw89: 8852c: update TX power tables to R69 (Zong-Zhe Yang)   
  - wifi: rtw89: download firmware with five times retry (Chia-Yuan Li)   
  - wifi: rtw89: 8922a: add beacon filter and CQM support (Po-Hao Huang)   
  - wifi: rtw89: 8922a: download template probe requests for 6 GHz band (Po-Hao Huang)   
  - wifi: rtw89: 8922a: update scan offload H2C fields (Chih-Kang Chang)   
  - dt-bindings: net: snps,dwmac: Align 'snps,priority' type definition (Rob Herring)   
  - uapi: team: use header file generated from YAML spec (Hangbin Liu)   
  - net: team: use policy generated by YAML spec (Hangbin Liu)   
  - net: team: rename team to team_core for linking (Hangbin Liu)   
  - Documentation: netlink: add a YAML spec for team (Hangbin Liu)   
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)   
  - caif: Use UTILITY_NAME_LENGTH instead of hard-coding 16 (Christophe JAILLET)   
  - net/dpaa2: Avoid explicit cpumask var allocation on stack (Dawei Li)   
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li)   
  - net: dsa: sja1105: drop driver owner assignment (Krzysztof Kozlowski)   
  - net: dsa: microchip: drop driver owner assignment (Krzysztof Kozlowski)   
  - dt-bindings: net: renesas,ethertsn: Create child-node for MDIO bus (Niklas Söderlund)   
  - page_pool: try direct bulk recycling (Alexander Lobakin)   
  - page_pool: check for PP direct cache locality later (Alexander Lobakin)   
  - rhashtable: Improve grammar (Jonathan Neuschäfer)   
  - tools: ynl: add ynl_dump_empty() helper (Jakub Kicinski)   
  - nfp: Avoid -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - net: phy: aquantia: add support for AQR114C PHY ID (Paweł Owoc)   
  - scx/compat.h: __COMPAT_read_enum() should use btf__find_by_name() (Tejun Heo)   
  - scx: Reorder scx_ops_flags enums to restore backward compatibility (Tejun Heo)   
  - selftests/bpf: Add pid limit for mptcpify prog (Geliang Tang)   
  - libbpf: Use local bpf_helpers.h include (Tobias Böhm)   
  - bpf: Improve program stats run-time calculation (Jose Fernandez)   
  - selftests/bpf: Skip test when perf_event_open returns EOPNOTSUPP (Pu Lehui)   
  - bpftool: Use __typeof__() instead of typeof() in BPF skeleton (Andrii Nakryiko)   
  - selftests/bpf: Using llvm may_goto inline asm for cond_break macro (Yonghong Song)   
  - bpf: Add a verbose message if map limit is reached (Anton Protopopov)   
  - bpf: Fix typo in uapi doc comments (David Lechner)   
  - bpftool: Clean-up typos, punctuation, list formatting in docs (Rameez Rehman)   
  - bpftool: Remove useless emphasis on command description in man pages (Rameez Rehman)   
  - bpftool: Use simpler indentation in source rST for documentation (Rameez Rehman)   
  - ipv6: remove RTNL protection from inet6_dump_fib() (Eric Dumazet)   
  - genetlink: remove linux/genetlink.h (Jakub Kicinski)   
  - net: openvswitch: remove unnecessary linux/genetlink.h include (Jakub Kicinski)   
  - netlink: create a new header for internal genetlink symbols (Jakub Kicinski)   
  - tcp/dccp: do not care about families in inet_twsk_purge() (Eric Dumazet)   
  - inet: preserve const qualifier in inet_csk() (Eric Dumazet)   
  - doc: netlink: Update tc spec with missing definitions (Donald Hunter)   
  - doc: netlink: Add hyperlinks to generated Netlink docs (Donald Hunter)   
  - doc: netlink: Change generated docs to limit TOC to depth 3 (Donald Hunter)   
  - ice: hold devlink lock for whole init/cleanup (Michal Swiatkowski)   
  - ice: move devlink port code to a separate file (Piotr Raczynski)   
  - ice: move ice_devlink.[ch] to devlink folder (Michal Swiatkowski)   
  - ice: Remove newlines in NL_SET_ERR_MSG_MOD (Thorsten Blum)   
  - ice: Add switch recipe reusing feature (Steven Zou)   
  - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt)   
  - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt)   
  - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt)   
  - bus: mhi: host: Add mhi_power_down_keep_dev() API to support system suspend/hibernation (Baochen Qiang)   
  - net: rps: move received_rps field to a better location (Eric Dumazet)   
  - net: rps: add rps_input_queue_head_add() helper (Eric Dumazet)   
  - net: rps: change input_queue_tail_incr_save() (Eric Dumazet)   
  - net: enqueue_to_backlog() cleanup (Eric Dumazet)   
  - net: make softnet_data.dropped an atomic_t (Eric Dumazet)   
  - net: enqueue_to_backlog() change vs not running device (Eric Dumazet)   
  - net: move dev_xmit_recursion() helpers to net/core/dev.h (Eric Dumazet)   
  - net: move kick_defer_list_purge() to net/core/dev.h (Eric Dumazet)   
  - ice: Add support for PFCP hardware offload in switchdev (Marcin Szycik)   
  - ice: refactor ICE_TC_FLWR_FIELD_ENC_OPTS (Marcin Szycik)   
  - pfcp: always set pfcp metadata (Michal Swiatkowski)   
  - pfcp: add PFCP module (Wojciech Drewek)   
  - net: net_test: add tests for IP tunnel flags conversion helpers (Alexander Lobakin)   
  - ip_tunnel: convert __be16 tunnel flags to bitmaps (Alexander Lobakin)   
  - ip_tunnel: use a separate struct to store tunnel params in the kernel (Alexander Lobakin)   
  - lib/bitmap: add compile-time test for __assign_bit() optimization (Alexander Lobakin)   
  - bitmap: make bitmap_{get,set}_value8() use bitmap_{read,write}() (Alexander Lobakin)   
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)   
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin)   
  - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() (Alexander Lobakin)   
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() (Alexander Lobakin)   
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin)   
  - linkmode: convert linkmode_{test,set,clear,mod}_bit() to macros (Alexander Lobakin)   
  - bitops: let the compiler optimize {__,}assign_bit() (Alexander Lobakin)   
  - bitops: make BYTES_TO_BITS() treewide-available (Alexander Lobakin)   
  - bitops: add missing prototype check (Alexander Lobakin)   
  - lib/test_bitmap: use pr_info() for non-error messages (Alexander Potapenko)   
  - lib/test_bitmap: add tests for bitmap_{read,write}() (Alexander Potapenko)   
  - lib/bitmap: add bitmap_{read,write}() (Syed Nayyar Waris)   
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet)   
  - selftests/bpf: make multi-uprobe tests work in RELEASE=1 mode (Andrii Nakryiko)   
  - dt-bindings: net: dwmac: Document STM32 property st,ext-phyclk (Christophe Roullier)   
  - netlink: introduce type-checking attribute iteration (Johannes Berg)   
  - net: add sk_wake_async_rcu() helper (Eric Dumazet)   
  - udp: avoid calling sock_def_readable() if possible (Eric Dumazet)   
  - udp: relax atomic operation on sk->sk_rmem_alloc (Eric Dumazet)   
  - udp: annotate data-race in __udp_enqueue_schedule_skb() (Eric Dumazet)   
  - mlx5: stop warning for 64KB pages (Arnd Bergmann)   
  - net: axienet: Fix kernel doc warnings (Suraj Gupta)   
  - octeontx2-pf: remove unused variables req_hdr and rsp_hdr (Su Hui)   
  - nfc: st95hf: drop driver owner assignment (Krzysztof Kozlowski)   
  - nfc: mrvl: spi: drop driver owner assignment (Krzysztof Kozlowski)   
  - net: wwan: mhi: drop driver owner assignment (Krzysztof Kozlowski)   
  - net: microchip: encx24j600: drop driver owner assignment (Krzysztof Kozlowski)   
  - tools/net/ynl: Add extack policy attribute decoding (Donald Hunter)   
  - devlink: use kvzalloc() to allocate devlink instance resources (Jian Wen)   
  - mlx5: avoid truncating error message (Arnd Bergmann)   
  - qed: avoid truncating work queue length (Arnd Bergmann)   
  - enetc: avoid truncating error message (Arnd Bergmann)   
  - octeontx2-af: Increase maximum BPID channels (Radha Mohan Chintakuntla)   
  - net: udp: add IP/port data to the tracepoint udp/udp_fail_queue_rcv_skb (Balazs Scheidler)   
  - net: port TP_STORE_ADDR_PORTS_SKB macro to be tcp/udp independent (Balazs Scheidler)   
  - batman-adv: prefer kfree_rcu() over call_rcu() with free-only callbacks (Dmitry Antipov)   
  - batman-adv: Start new development cycle (Simon Wunderlich)   
  - nfc: st95hf: Switch to using gpiod API (Andy Shevchenko)   
  - net: phy: air_en8811h: Add the Airoha EN8811H PHY driver (Eric Woudstra)   
  - dt-bindings: net: airoha,en8811h: Add en8811h (Eric Woudstra)   
  - bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie. (Alexei Starovoitov)   
  - i40e: avoid forward declarations in i40e_nvm.c (Maciej Fijalkowski)   
  - igc: Refactor runtime power management flow (Sasha Neftin)   
  - net: intel: implement modern PM ops declarations (Jesse Brandeburg)   
  - igb: simplify pci ops declaration (Jesse Brandeburg)   
  - selftest: af_unix: Test GC for SCM_RIGHTS. (Kuniyuki Iwashima)   
  - af_unix: Replace garbage collection algorithm. (Kuniyuki Iwashima)   
  - af_unix: Detect dead SCC. (Kuniyuki Iwashima)   
  - af_unix: Assign a unique index to SCC. (Kuniyuki Iwashima)   
  - af_unix: Avoid Tarjan's algorithm if unnecessary. (Kuniyuki Iwashima)   
  - af_unix: Skip GC if no cycle exists. (Kuniyuki Iwashima)   
  - af_unix: Save O(n) setup of Tarjan's algo. (Kuniyuki Iwashima)   
  - af_unix: Fix up unix_edge.successor for embryo socket. (Kuniyuki Iwashima)   
  - af_unix: Save listener for embryo socket. (Kuniyuki Iwashima)   
  - af_unix: Detect Strongly Connected Components. (Kuniyuki Iwashima)   
  - af_unix: Iterate all vertices by DFS. (Kuniyuki Iwashima)   
  - af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. (Kuniyuki Iwashima)   
  - af_unix: Link struct unix_edge when queuing skb. (Kuniyuki Iwashima)   
  - af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. (Kuniyuki Iwashima)   
  - af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. (Kuniyuki Iwashima)   
  - tcp/dccp: bypass empty buckets in inet_twsk_purge() (Eric Dumazet)   
  - net: dsa: hellcreek: Convert to gettimex64() (Kurt Kanzenbach)   
  - net/smc: make smc_hash_sk/smc_unhash_sk static (Zhengchao Shao)   
  - net: sched: make skip_sw actually skip software (Asbjørn Sloth Tønnesen)   
  - net: sched: cls_api: add filter counter (Asbjørn Sloth Tønnesen)   
  - net: sched: cls_api: add skip_sw counter (Asbjørn Sloth Tønnesen)   
  - bnxt_en: Support adding ntuple rules on RSS contexts (Pavan Chebbi)   
  - bnxt_en: Refactor bnxt_cfg_rfs_ring_tbl_idx() (Pavan Chebbi)   
  - bnxt_en: Support RSS contexts in ethtool .{get|set}_rxfh() (Pavan Chebbi)   
  - bnxt_en: Refactor bnxt_set_rxfh() (Michael Chan)   
  - bnxt_en: Add a new_rss_ctx parameter to bnxt_rfs_capable() (Pavan Chebbi)   
  - bnxt_en: Simplify bnxt_rfs_capable() (Michael Chan)   
  - bnxt_en: Refactor RSS indir alloc/set functions (Pavan Chebbi)   
  - bnxt_en: Introduce rss ctx structure, alloc/free functions (Pavan Chebbi)   
  - bnxt_en: Refactor VNIC alloc and cfg functions (Pavan Chebbi)   
  - bnxt_en: Add helper function bnxt_hwrm_vnic_rss_cfg_p5() (Pavan Chebbi)   
  - bnxt_en: Retry PTP TX timestamp from FW for 1 second (Pavan Chebbi)   
  - bnxt_en: Add a timeout parameter to bnxt_hwrm_port_ts_query() (Michael Chan)   
  - net: pcs: rzn1-miic: Init RX clock early if MAC requires it (Romain Gantois)   
  - net: phy: qcom: at803x: Avoid hibernating if MAC requires RX clock (Russell King (Oracle))   
  - net: stmmac: Signal to PHY/PCS drivers to keep RX clock on (Romain Gantois)   
  - net: stmmac: Support a generic PCS field in mac_device_info (Romain Gantois)   
  - net: stmmac: don't rely on lynx_pcs presence to check for a PHY (Maxime Chevallier)   
  - net: phylink: add rxc_always_on flag to phylink_pcs (Romain Gantois)   
  - net: phylink: add PHY_F_RXC_ALWAYS_ON to PHY dev flags (Russell King (Oracle))   
  - scx: Use the new struct_ops compatibililty mechanism (Tejun Heo)   
  - selftests/bpf: Drop settimeo in do_test (Geliang Tang)   
  - selftests/bpf: Use connect_fd_to_fd in bpf_tcp_ca (Geliang Tang)   
  - scx: Build fix after pulling bpf/for-next (Tejun Heo)   
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Martin KaFai Lau)   
  - idpf: sprinkle __counted_by{,_le}() in the virtchnl2 header (Alexander Lobakin)   
  - idpf: make virtchnl2.h self-contained (Alexander Lobakin)   
  - compiler_types: add Endianness-dependent __counted_by_{le,be} (Alexander Lobakin)   
  - selftests/bpf: Add a kprobe_multi subtest to use addrs instead of syms (Yonghong Song)   
  - selftests/bpf: Fix kprobe_multi_bench_attach test failure with LTO kernel (Yonghong Song)   
  - selftests/bpf: Add {load,search}_kallsyms_custom_local() (Yonghong Song)   
  - selftests/bpf: Refactor trace helper func load_kallsyms_local() (Yonghong Song)   
  - selftests/bpf: Refactor some functions for kprobe_multi_test (Yonghong Song)   
  - libbpf: Handle <orig_name>.llvm.<hash> symbol properly (Yonghong Song)   
  - libbpf: Mark libbpf_kallsyms_parse static function (Yonghong Song)   
  - selftests/bpf: Replace CHECK with ASSERT macros for ksyms test (Yonghong Song)   
  - selftests/bpf: Test loading bpf-tcp-cc prog calling the kernel tcp-cc kfuncs (Martin KaFai Lau)   
  - bpf: Remove CONFIG_X86 and CONFIG_DYNAMIC_FTRACE guard from the tcp-cc kfuncs (Martin KaFai Lau)   
  - bpf: Mitigate latency spikes associated with freeing non-preallocated htab (Yafang Shao)   
  - selftests/bpf: add batched tp/raw_tp/fmodret tests (Andrii Nakryiko)   
  - bpf: add bpf_modify_return_test_tp() kfunc triggering tracepoint (Andrii Nakryiko)   
  - selftests/bpf: lazy-load trigger bench BPF programs (Andrii Nakryiko)   
  - selftests/bpf: remove syscall-driven benchs, keep syscall-count only (Andrii Nakryiko)   
  - selftests/bpf: add batched, mostly in-kernel BPF triggering benchmarks (Andrii Nakryiko)   
  - selftests/bpf: rename and clean up userspace-triggered benchmarks (Andrii Nakryiko)   
  - bpf,arena: Use helper sizeof_field in struct accessors (Haiyue Wang)   
  - bpf: improve error message for unsupported helper (Mykyta Yatsenko)   
  - bpf: Add a check for struct bpf_fib_lookup size (Anton Protopopov)   
  - selftests/bpf: Add BPF_FIB_LOOKUP_MARK tests (Anton Protopopov)   
  - bpf: Add support for passing mark with bpf_fib_lookup (Anton Protopopov)   
  - net: remove gfp_mask from napi_alloc_skb() (Jakub Kicinski)   
  - qed: Drop useless pci_params.pm_cap (Bjorn Helgaas)   
  - gve: Add counter adminq_get_ptype_map_cnt to stats report (John Fraker)   
  - ravb: Add support for an optional MDIO mode (Niklas Söderlund)   
  - dt-bindings: net: renesas,etheravb: Add optional MDIO bus node (Niklas Söderlund)   
  - wifi: rtw88: station mode only for SDIO chips (Ping-Ke Shih)   
  - doc/netlink/specs: Add vlan attr in rt_link spec (Hangbin Liu)   
  - ynl: support hex display_hint for integer (Hangbin Liu)   
  - selftests: forwarding: Add a test for testing lib.sh functionality (Petr Machata)   
  - selftests: forwarding: router_mpath_nh_lib: Don't skip, xfail on veth (Petr Machata)   
  - selftests: forwarding: Mark performance-sensitive tests (Petr Machata)   
  - selftests: forwarding: Support for performance sensitive tests (Petr Machata)   
  - selftests: forwarding: Convert log_test() to recognize RET values (Petr Machata)   
  - selftests: forwarding: Have RET track kselftest framework constants (Petr Machata)   
  - selftests: lib: Define more kselftest exit codes (Petr Machata)   
  - selftests: forwarding: Change inappropriate log_test_skip() calls (Petr Machata)   
  - selftests: forwarding: Ditch skip_on_veth() (Petr Machata)   
  - selftests: forwarding: Move several selftests (Petr Machata)   
  - selftests: forwarding: ipip_lib: Do not import lib.sh (Petr Machata)   
  - selftests: forwarding: README: Document customization (Petr Machata)   
  - selftests: forwarding.config.sample: Move overrides to lib.sh (Petr Machata)   
  - selftests: net: libs: Change variable fallback syntax (Petr Machata)   
  - scx: Add selftests for scx_bpf_exit() (David Vernet)   
  - scx: Fix init_enable_count (David Vernet)   
  - scx: Add scx_bpf_exit() macro to scx/common.bpf.h (David Vernet)   
  - scx: Allow clean exits from the scheduler with scx_bpf_exit() (David Vernet)   
  - scx_flatcg: Keep cgroup rb nodes stashed (Dave Marchevsky)   
  - scx: Update conditions for WAKE_SYNC migration (David Vernet)   
  - wifi: mt76: mt7915: workaround dubious x | !y warning (Kalle Valo)   
  - wifi: mwl8k: Avoid -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - wifi: ti: Avoid a hundred -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - net: amd8111e: Drop unused copy of pm_cap (Bjorn Helgaas)   
  - net: pin system percpu page_pools to the corresponding NUMA nodes (Alexander Lobakin)   
  - net: remove skb_free_datagram_locked() (Eric Dumazet)   
  - net: Rename rps_lock to backlog_lock. (Sebastian Andrzej Siewior)   
  - net: Use backlog-NAPI to clean up the defer_list. (Sebastian Andrzej Siewior)   
  - net: Allow to use SMP threads for backlog NAPI. (Sebastian Andrzej Siewior)   
  - net: Remove conditional threaded-NAPI wakeup based on task state. (Sebastian Andrzej Siewior)   
  - trace: use TP_STORE_ADDRS() macro in inet_sock_set_state() (Jason Xing)   
  - trace: use TP_STORE_ADDRS() macro in inet_sk_error_report() (Jason Xing)   
  - trace: move to TP_STORE_ADDRS related macro to net_probe_common.h (Jason Xing)   
  - dns_resolver: correct module name in dns resolver documentation (Bharath SM)   
  - wifi: rtw89: disable txptctrl IMR to avoid flase alarm (Chia-Yuan Li)   
  - wifi: rtw88: coex: Prevent doing I/O during Wi-Fi power saving (Ching-Te Ku)   
  - ice: count representor stats (Michal Swiatkowski)   
  - ice: do switchdev slow-path Rx using PF VSI (Michal Swiatkowski)   
  - ice: change repr::id values (Michal Swiatkowski)   
  - ice: remove switchdev control plane VSI (Michal Swiatkowski)   
  - ice: control default Tx rule in lag (Michal Swiatkowski)   
  - ice: default Tx rule instead of to queue (Michal Swiatkowski)   
  - ice: do Tx through PF netdev in slow-path (Michal Swiatkowski)   
  - ice: remove eswitch changing queues algorithm (Michal Swiatkowski)   
  - wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask (Johannes Berg)   
  - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update (Yonghong Song)   
  - bpf: implement insn_is_cast_user() helper for JITs (Puranjay Mohan)   
  - bpf: Avoid get_kernel_nofault() to fetch kprobe entry IP (Andrii Nakryiko)   
  - selftests/bpf: Use start_server in bpf_tcp_ca (Geliang Tang)   
  - bpf: Sync uapi bpf.h to tools directory (Yonghong Song)   
  - net: rfkill: gpio: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - wifi: mac80211: use kvcalloc() for codel vars (Johannes Berg)   
  - wifi: iwlwifi: reconfigure TLC during HW restart (Johannes Berg)   
  - wifi: iwlwifi: mvm: don't change BA sessions during restart (Johannes Berg)   
  - wifi: iwlwifi: mvm: select STA mask only for active links (Johannes Berg)   
  - wifi: iwlwifi: mvm: set wider BW OFDMA ignore correctly (Johannes Berg)   
  - wifi: iwlwifi: Add support for LARI_CONFIG_CHANGE_CMD cmd v9 (Anjaneyulu)   
  - wifi: iwlwifi: mvm: Declare HE/EHT capabilities support for P2P interfaces (Ilan Peer)   
  - wifi: iwlwifi: mvm: Remove outdated comment (Miri Korenblit)   
  - wifi: iwlwifi: add support for BZ_W (Emmanuel Grumbach)   
  - wifi: iwlwifi: Print a specific device name. (Daniel Amosi)   
  - wifi: iwlwifi: remove wrong CRF_IDs (Emmanuel Grumbach)   
  - wifi: iwlwifi: remove devices that never came out (Emmanuel Grumbach)   
  - wifi: iwlwifi: mvm: mark EMLSR disabled in cleanup iterator (Benjamin Berg)   
  - wifi: iwlwifi: mvm: fix active link counting during recovery (Benjamin Berg)   
  - wifi: iwlwifi: mvm: assign link STA ID lookups during restart (Benjamin Berg)   
  - wifi: mac80211: reactivate multi-link later in restart (Johannes Berg)   
  - wifi: mac80211: improve drop for action frame return (Johannes Berg)   
  - wifi: mac80211: don't ask driver about no-op link changes (Johannes Berg)   
  - wifi: mac80211: don't select link ID if not provided in scan request (Ayala Beker)   
  - wifi: mac80211_hwsim: Declare HE/EHT capabilities support for P2P interfaces (Ilan Peer)   
  - wifi: mac80211: clarify IEEE80211_STATUS_SUBDATA_MASK (Johannes Berg)   
  - wifi: mac80211: don't enter idle during link switch (Johannes Berg)   
  - wifi: iwlwifi: mvm: allocate STA links only for active links (Johannes Berg)   
  - wifi: iwlwifi: enable monitor on passive/inactive channels (Johannes Berg)   
  - wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete (Ilan Peer)   
  - wifi: iwlwifi: remove 6 GHz NVM override (Johannes Berg)   
  - wifi: iwlwifi: mvm: don't support puncturing in 5 GHz (Johannes Berg)   
  - wifi: iwlwifi: fw: add clarifying comments about iwl_fwrt_dump_data (Johannes Berg)   
  - wifi: iwlwifi: mvm: always apply 6 GHz probe limitations (Benjamin Berg)   
  - wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8 (Emmanuel Grumbach)   
  - wifi: iwlwifi: add a kunit test for PCI table duplicates (Johannes Berg)   
  - wifi: iwlwifi: mvm: add debugfs for forcing unprotected ranging request (Avraham Stern)   
  - wifi: iwlwifi: mvm: Add debugfs entry for triggering internal MLO scan (Ilan Peer)   
  - wifi: iwlwifi: mvm: Introduce internal MLO passive scan (Ilan Peer)   
  - wifi: mac80211: add support for tearing down negotiated TTLM (Ayala Beker)   
  - wifi: cfg80211: ignore non-TX BSSs in per-STA profile (Benjamin Berg)   
  - wifi: cfg80211: check BSSID Index against MaxBSSID (Benjamin Berg)   
  - wifi: mac80211: improve association error reporting slightly (Benjamin Berg)   
  - wifi: mac80211: add flag to disallow puncturing in 5 GHz (Johannes Berg)   
  - wifi: cfg80211: handle indoor AFC/LPI AP in probe response and beacon (Anjaneyulu)   
  - wifi: mac80211: handle indoor AFC/LPI AP on assoc success (Anjaneyulu)   
  - wifi: mac80211: fix BSS_CHANGED_MLD_TTLM description (Ayala Beker)   
  - wifi: mac80211: clarify the dormant/suspended links docs (Johannes Berg)   
  - wifi: mac80211_hwsim: move skip_beacons to be per link (Johannes Berg)   
  - wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok() (Johannes Berg)   
  - wifi: ieee80211: check for NULL in ieee80211_mle_size_ok() (Johannes Berg)   
  - wifi: mac80211_hwsim: set link ID information during Rx (Aditya Kumar Singh)   
  - wifi: nl80211: cleanup nl80211.h kernel-doc (Jeff Johnson)   
  - wifi: nl80211: fix nl80211 uapi comment style issues (Jeff Johnson)   
  - wifi: nl80211: rename enum plink_actions (Jeff Johnson)   
  - wifi: mac80211: spectmgmt: simplify 6 GHz HE/EHT handling (Johannes Berg)   
  - wifi: mac80211: supplement parsing of puncturing bitmap (Kang Yang)   
  - wifi: iwlwifi: pcie: remove duplicate PCI IDs entry (Johannes Berg)   
  - wifi: iwlwifi: mvm: Refactor scan start (Ilan Peer)   
  - wifi: iwlwifi: mvm: advertise IEEE80211_HW_HANDLES_QUIET_CSA (Johannes Berg)   
  - wifi: iwlwifi: mvm: fix flushing during quiet CSA (Johannes Berg)   
  - wifi: iwlwifi: mvm: support wowlan notif version 4 (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: skip keys of other links (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: stop assuming sta id 0 in d3 (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: fix the sta id in offload (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: Move beacon filtering to be per link (Ilan Peer)   
  - wifi: iwlwifi: fix firmware API kernel doc (Shaul Triebitz)   
  - wifi: ath9k: eeprom: fix sparse endian warnings (Kalle Valo)   
  - wifi: ath9k: fix ath9k_use_msi declaration (Kalle Valo)   
  - wifi: ath9k: ath9k_set_moredata(): fix sparse warnings (Kalle Valo)   
  - wifi: wil6210: fix sparse warnings (Kalle Valo)   
  - wifi: wcn36xx: main: fix sparse warnings (Kalle Valo)   
  - wifi: wcn36xx: buff_to_be(): fix sparse warnings (Kalle Valo)   
  - wifi: ath6kl: fix sparse warnings (Kalle Valo)   
  - wifi: ath: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)   
  - libbpf: Add new sec_def "sk_skb/verdict" (Yonghong Song)   
  - selftests/bpf: Mark uprobe trigger functions with nocf_check attribute (Jiri Olsa)   
  - selftests/bpf: Use syscall(SYS_gettid) instead of gettid() wrapper in bench (Alan Maguire)   
  - wifi: rtlwifi: always assume QoS mode in rtl8192cu (Dmitry Antipov)   
  - wifi: rtlwifi: drop WMM stubs from rtl8192cu (Dmitry Antipov)   
  - bpf-next: Avoid goto in regs_refine_cond_op() (Harishankar Vishwanathan)   
  - wifi: qtnfmac: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: mt76: mt7915: workaround too long expansion sparse warnings (Lorenzo Bianconi)   
  - wifi: ti: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)   
  - wifi: b43: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)   
  - wifi: ath11k: remove duplicate definitions in wmi.h (Kang Yang)   
  - wifi: ath11k: do not process consecutive RDDM event (Baochen Qiang)   
  - wifi: ath12k: Refactor error handler of Rxdma replenish (Karthikeyan Periyasamy)   
  - wifi: ath12k: Optimize the lock contention of used list in Rx data path (Karthikeyan Periyasamy)   
  - wifi: ath12k: Refactor Rxdma buffer replinish argument (Karthikeyan Periyasamy)   
  - bpftool: Clean up HOST_CFLAGS, HOST_LDFLAGS for bootstrap bpftool (Quentin Monnet)   
  - wifi: ath12k: use correct flag field for 320 MHz channels (Aloka Dixit)   
  - wifi: ath12k: remove duplicate definitions in wmi.h (Kang Yang)   
  - wifi: ath12k: fix desc address calculation in wbm tx completion (Thiraviyam Mariyappan)   
  - selftests/bpf: scale benchmark counting by using per-CPU counters (Andrii Nakryiko)   
  - bpftool: Remove unnecessary source files from bootstrap version (Quentin Monnet)   
  - bpftool: Enable libbpf logs when loading pid_iter in debug mode (Quentin Monnet)   
  - selftests/bpf: add raw_tp/tp_btf BPF cookie subtests (Andrii Nakryiko)   
  - libbpf: add support for BPF cookie for raw_tp/tp_btf programs (Andrii Nakryiko)   
  - bpf: support BPF cookie in raw tracepoint (raw_tp, tp_btf) programs (Andrii Nakryiko)   
  - bpf: pass whole link instead of prog when triggering raw tracepoint (Andrii Nakryiko)   
  - bpf: flatten bpf_probe_register call chain (Andrii Nakryiko)   
  - wifi: rtl8xxxu: enable MFP support (Martin Kaistra)   
  - selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh (Alessandro Carminati (Red Hat))   
  - selftests/bpf: Add a sk_msg prog bpf_get_ns_current_pid_tgid() test (Yonghong Song)   
  - selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test (Yonghong Song)   
  - selftests/bpf: Refactor out some functions in ns_current_pid_tgid test (Yonghong Song)   
  - selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test (Yonghong Song)   
  - bpf: Allow helper bpf_get_[ns_]current_pid_tgid() for all prog types (Yonghong Song)   
  - bpf/lpm_trie: Inline longest_prefix_match for fastpath (Jesper Dangaard Brouer)   
  - scx: Fix ops.cgroup_move() not being called on a task which went through ops.cgroup_prep_move() (Tejun Heo)   
  - scx: Improve error behavior when p->scx.cgrp_moving_from is unexpectedly NULL (Tejun Heo)   
  - bpf: Check return from set_memory_rox() (Christophe Leroy)   
  - bpf: Remove arch_unprotect_bpf_trampoline() (Christophe Leroy)   
  - libbpbpf: Check bpf_map/bpf_program fd validity (Mykyta Yatsenko)   
  - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem (Martin KaFai Lau)   
  - wifi: mwifiex: Add missing MODULE_FIRMWARE() for SD8801 (Víctor Gonzalo)   
  - cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (Mikhail Lobanov)   
  - selftests/bpf: Remove second semicolon (Colin Ian King)   
  - net: stmmac: dwmac-rk: Remove unused of_gpio.h (Andy Shevchenko)   
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() (Christophe Leroy)   
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() (Christophe Leroy)   
  - bpf: preserve sleepable bit in subprog info (Andrii Nakryiko)   
  - scx: Add newline after test error output (David Vernet)   
  - scx: Update selftests to use new UEI macros (David Vernet)   
  - selftests/bpf: Ensure libbpf skip all-zeros fields of struct_ops maps. (Kui-Feng Lee)   
  - libbpf: Skip zeroed or null fields if not found in the kernel type. (Kui-Feng Lee)   
  - libbpf: Prevent null-pointer dereference when prog to load has no BTF (Quentin Monnet)   
  - bpftool: Fix missing pids during link show (Yonghong Song)   
  - bpftool: Cast pointers for shadow types explicitly. (Kui-Feng Lee)   
  - wifi: ath11k: advertise P2P dev support for QCA6390/WCN6855/QCA2066 (Kang Yang)   
  - wifi: ath11k: change scan flag scan_f_filter_prb_req for QCA6390/WCN6855/QCA2066 (Kang Yang)   
  - wifi: ath11k: change WLAN_SCAN_PARAMS_MAX_IE_LEN from 256 to 512 (Kang Yang)   
  - wifi: ath11k: implement handling of P2P NoA event (Kang Yang)   
  - wifi: ath11k: add P2P IE in beacon template (Kang Yang)   
  - wifi: ath11k: change interface combination for P2P mode (Kang Yang)   
  - wifi: rtw88: SDIO device driver for RTL8723CS (Fiona Klute)   
  - wifi: rtw88: Reset 8703b firmware before download (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b_tables.c (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b_tables.h (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b.c (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b.h (Fiona Klute)   
  - wifi: rtw88: Add definitions for 8703b chip (Fiona Klute)   
  - wifi: rtw88: Debug output for rtw8723x EFUSE (Fiona Klute)   
  - wifi: rtw88: Shared module for rtw8723x devices (Fiona Klute)   
  - wifi: rtw89: 8922a: add 8922ae to Makefile and Kconfig (Ping-Ke Shih)   
  - wifi: rtw89: 8922a: update chip parameter for coex (Ching-Te Ku)   
  - wifi: rtw89: coex: Add TDMA slot parameter setting version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add TDMA version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add antenna setting function for RTL8922A (Ching-Te Ku)   
  - wifi: rtw89: coex: Add WiFi role info format version 8 (Ching-Te Ku)   
  - ssb: use "break" on default case to prevent warning (Randy Dunlap)   
  - scx: Use cpu_online_mask when resetting idle masks (Tejun Heo)   
  - wifi: ath11k: don't force enable power save on non-running vdevs (Baochen Qiang)   
  - ssb: drop use of non-existing CONFIG_SSB_DEBUG symbol (Randy Dunlap)   
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: Add CYW43439 DT binding (Marek Vasut)   
  - bcma: convert to platform remove callback returning void (Uwe Kleine-König)   
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Duoming Zhou)   
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb)   
  - wifi: rtw89: Correct EHT TX rate on 20MHz connection (Dian-Syuan Yang)   
  - wifi: ath11k: adjust a comment to reflect reality (Kevin Lo)   
  - scx: Trivial updates from patch splitting (Tejun Heo)   
  - wifi: ath10k: poll service ready message before failing (Baochen Qiang)   
  - wifi: ath11k: fix soc_dp_stats debugfs file permission (Jeff Johnson)   
  - wifi: ath11k: remove obsolete struct wmi_start_scan_arg (Jeff Johnson)   
  - wifi: ath12k: remove obsolete struct wmi_start_scan_arg (Jeff Johnson)   
  - scx examples: Drop stray "[-p]" from usage help messages (Tejun Heo)   
  - scx: Update .github workflow link (David Vernet)   
  - scx: Implement configurable user_exit_info dump buffer size (Tejun Heo)   
  - compat: Introduce SCX_LOAD/ATTACH() and apply to all example schedulers (Tejun Heo)   
  - compat.bpf.h: Add DEFINE_SCX_OPS() (Tejun Heo)   
  - scx: Add sched_ext_ops.exit_dump_len and add userspace plumbing (Tejun Heo)   
  - scx/compat: Apply David's suggestions (Tejun Heo)   
  - selftests/bpf: Test cases for '?' in BTF names (Eduard Zingerman)   
  - bpf: Allow all printable characters in BTF DATASEC names (Eduard Zingerman)   
  - selftests/bpf: Test case for SEC("?.struct_ops") (Eduard Zingerman)   
  - libbpf: Rewrite btf datasec names starting from '?' (Eduard Zingerman)   
  - libbpf: Struct_ops in SEC("?.struct_ops") / SEC("?.struct_ops.link") (Eduard Zingerman)   
  - libbpf: Replace elf_state->st_ops_* fields with SEC_ST_OPS sec_type (Eduard Zingerman)   
  - selftests/bpf: Verify struct_ops autoload/autocreate sync (Eduard Zingerman)   
  - libbpf: Sync progs autoload with maps autocreate for struct_ops maps (Eduard Zingerman)   
  - selftests/bpf: Test autocreate behavior for struct_ops maps (Eduard Zingerman)   
  - selftests/bpf: Bad_struct_ops test (Eduard Zingerman)   
  - selftests/bpf: Utility functions to capture libbpf log in test_progs (Eduard Zingerman)   
  - selftests/bpf: Test struct_ops map definition with type suffix (Eduard Zingerman)   
  - libbpf: Honor autocreate flag for struct_ops maps (Eduard Zingerman)   
  - libbpf: Tie struct_ops programs to kernel BTF ids, not to local ids (Eduard Zingerman)   
  - libbpf: Allow version suffixes (___smth) for struct_ops types (Eduard Zingerman)   
  - selftests/bpf: Test may_goto (Alexei Starovoitov)   
  - bpf: Add cond_break macro (Alexei Starovoitov)   
  - bpf: Recognize that two registers are safe when their ranges match (Alexei Starovoitov)   
  - bpf: Introduce may_goto instruction (Alexei Starovoitov)   
  - mm: Introduce VM_SPARSE kind and vm_area_[un]map_pages(). (Alexei Starovoitov)   
  - scx/compat.bpf.h: Replace __COMPAT_scx_bpf_kick_cpu_IDLE() with __COMPAT_SCX_KICK_IDLE (Tejun Heo)   
  - scx: Add __COMPAT_SCX_OPS_SWITCH_PARTIAL and convert scx_qmap (Tejun Heo)   
  - tools/sched_ext: Remove -p option from three schedulers (Tejun Heo)   
  - tools/sched_ext, tools/testing/selftests/sched_ext: Fix build after scx_bpf_switch_all() removal (Tejun Heo)   
  - scx: Replace scx_bpf_switch_all() with an ops flag (Tejun Heo)   
  - scx: Fix scx_ops_bypass_depth going out of sync (Tejun Heo)   
  - scx: Ignore WF_EXEC (Tejun Heo)   
  - scx: Move tools/sched_ext/Kconfig content into sched-ext.rst (Tejun Heo)   
  - scx: Improve error reporting after an early scx_bpf_error() (Tejun Heo)   
  - tools/sched_ext: Drop unnecessary stuff from .gitignore (Tejun Heo)   
  - scx: Fix spurious ops verification failure due to missing jiffies conversion (Tejun Heo)   
  - tools/sched_ext: Bring back scx_central and scx_flatcg and simplify README (Tejun Heo)   
  - scx: More cosmetics (Tejun Heo)   
  - selftests/sched_ext: Make status_to_result() never return NULL (Tejun Heo)   
  - selftests/sched_ext: Rename scx to sched_ext for consistency (Tejun Heo)   
  - scx: Cosmetic changes and comment update (Tejun Heo)   
  - scx: Reorder the two fields in scx_init_task_args (Tejun Heo)   
  - scx: Include cpu_to_kick_if_idle in debug dump (Tejun Heo)   
  - scx: Cosmetic (Tejun Heo)   
  - scx: Initialize p->scx.runnable_at to jiffies instead of INITIAL_JIFFIES (Tejun Heo)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - tools/sched_ext: Add missing dispatch_cancel decl and drop unused ravg headers (Tejun Heo)   
  - tools/sched_ext: Drop unused stuff from .gitignore and Makefile (Tejun Heo)   
  - scx: Cosmetic (Tejun Heo)   
  - scx: Tabify (Tejun Heo)   
  - scx: Fix kfunc registration (Tejun Heo)   
  - scx: Build fixes after pulling linus#main + bpf/for-next (Tejun Heo)   
  - scx: Avoid memory leak of scx_root_kobj (David Vernet)   
  - scx: Don't wait for a work item before scheduling is restored in scx_ops_disable_workfn() (Tejun Heo)   
  - scx: Fix invalid state transition while scheduler is loaded (Tejun Heo)   
  - scx: Better invalid state transition warnings (Tejun Heo)   
  - scx: Actually allocate rq->scx.cpus_to_kick_if_idle (Tejun Heo)   
  - scx: Implement SCX_KICK_IDLE (Tejun Heo)   
  - scx: Factor out kick_one_cpu() from kick_cpus_irq_workfn() (Tejun Heo)   
  - scx: Clear scx_rq->cpus_* bits selectively and reduce memory access (Tejun Heo)   
  - scx: Use BPF macros for sched_ext kfuncs (David Vernet)   
  - scx: Only do CI runs for PRs (David Vernet)   
  - scx: Implement scx_bpf_dispatch_cancel() (Tejun Heo)   
  - scx: Print p->cpus_ptr when dumping scheduler state (Tejun Heo)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - scx: Purge most schedulers from tools/sched_ext (Tejun Heo)   
  - scx: Update spaces -> tabs for maybe_null testcase (David Vernet)   
  - scx: Add stress-test for loading schedulers in a tight loop (David Vernet)   
  - scx: Add "maximal" scheduler testcase (David Vernet)   
  - scx: Don't print skipped tests by default (David Vernet)   
  - scx: Add testcases for transitioning in struct scx_init_task_args (David Vernet)   
  - scx: Add fork field to struct scx_init_task_args (David Vernet)   
  - scx: fix NULL pointer dereference with scx_exit_info (Andrea Righi)   
  - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id() (Tejun Heo)   
  - kernfs: Rearrange kernfs_node fields to reduce its size on 64bit (Tejun Heo)   
  - Revert "kernfs: convert kernfs_idr_lock to an irq safe raw spinlock" (Tejun Heo)   
  - scx: rq should be locked when calling scx_ops_exit_task() from scx_cancel_fork() (Tejun Heo)   
  - scx: Dump debug info after an abort (Tejun Heo)   
  - scx: Misc scx_exit_info related updates (Tejun Heo)   
  - scx: Make scx_exit_info fields dynamically allocated (Tejun Heo)   
  - scx: Fix a couple follow ups to recent struct_ops changes (David Vernet)   
  - scx: Replace /sys/kernel/debug/sched/ext with tools/sched_ext/scx_show_state.py (Tejun Heo)   
  - scx: Add /sys/kernel/sched_ext interface (Tejun Heo)   
  - selftests/scx: Check if MAYBE_NULL works for the 2nd argument of .dispatch. (Thinker Lee)   
  - scx: Make the pointer passing to .dispatch MAYBE_NULL. (Thinker Lee)   
  - ci: add github workflow to test the sched-ext kernel (Andrea Righi)   
  - scx: Sync from scx repo (Tejun Heo)   
  - scx: Reorder scx_fork_rwsem, cpu_hotplug_lock and scx_cgroup_rwsem (Tejun Heo)   
  - scx: Narrow cpus_read_lock() critical section in scx_ops_enable() (Tejun Heo)   
  - scx: Copy scx_exit_kind to scx_test.h (David Vernet)   
  - scx: Update ddsp testcases to check for error exits (David Vernet)   
  - scx: Convert remaining testcases to use new framework (David Vernet)   
  - scx: Implement scx selftests framework (David Vernet)   
  - scx: Test vtime dispatching from ops.select_cpu() (David Vernet)   
  - scx: Keep track of enq flags in direct dispatch (David Vernet)   
  - scx: Fix direct dispatch for non-builtin DSQs (David Vernet)   
  - scx: Sync schedulers from SCX v0.1.5 (74923c6cdbc3) (Tejun Heo)   
  - scx: Make scx_task_state handling more idiomatic (Tejun Heo)   
  - Revert "scx: Avoid possible deadlock with cpus_read_lock()" (Tejun Heo)   
  - scx: Disabling scx_bpf_kick_cpu() while bypassing (Tejun Heo)   
  - scx: Bypass while PM operations are in progress (Tejun Heo)   
  - scx: s/register_ext_kfuncs()/scx_init()/ (Tejun Heo)   
  - scx: Expose bypassing state to userland (Tejun Heo)   
  - scx: Optimize scx_ops_bypass() (Tejun Heo)   
  - scx: Implement turning off bypassing (Tejun Heo)   
  - scx: Implement bypass depth and always bypass while disabling (Tejun Heo)   
  - scx: Factor out scx_ops_bypass() and s/scx_ops_disabling()/scx_ops_bypassing()/g (Tejun Heo)   
  - scx: Rename rq->scx.watchdog_list and friends to runnable_list and counterparts (Tejun Heo)   
  - scx: Use READ/WRITE_ONCE() for scx_watchdog_timeout/timestamp (Tejun Heo)   
  - scx: Set default slice for default select_cpu dispatch (David Vernet)   
  - scx: Avoid possible deadlock with cpus_read_lock() (David Vernet)   
  - scx: Make select_cpu_dfl test a bit less brittle (David Vernet)   
  - scx: Claim idle core in scx_select_cpu_dfl for nr_cpus_allowed ==1 (David Vernet)   
  - scx: Add missing DSQ fallback test files (David Vernet)   
  - scx: Move sched_ext_entity.ddsq_id out of modifiable fields (David Vernet)   
  - scx: Add init_enable_count testcase (David Vernet)   
  - scx: Rename prep_enable() and cancel_enable(), add exit_task() (David Vernet)   
  - scx: Call enable / disable on entry / exit to scx (David Vernet)   
  - scx: Always set task scx weight before enable (David Vernet)   
  - scx: Add testcases for vtime-dispatching to builtin DSQs (David Vernet)   
  - scx: Error for a priq builtin DSQ in dispatch_enqueue() (David Vernet)   
  - scx: Add selftests for new select_cpu dispatch semantics (David Vernet)   
  - scx: Add scx_bpf_select_cpu_dfl() kfunc (David Vernet)   
  - scx: Remove SCX_ENQ_LOCAL flag (David Vernet)   
  - scx: Support direct dispatching from ops.select_cpu() (David Vernet)   
  - sched_ext: fix race in scx_move_task() with exiting tasks (Andrea Righi)   
  - kernfs: convert kernfs_idr_lock to an irq safe raw spinlock (Andrea Righi)   
  - scx: Add skeleton for scx testing framework (David Vernet)   
  - scx: Add missing ) to $(error) invocation in Makefile (David Vernet)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (David Vernet)   
  - scx: Remove now unused $rb_node from first_local_task() (Tejun Heo)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - scx: Enforce either/or usage of DSQ FIFO/PRIQ dispatching (David Vernet)   
  - scx: Disable vtime ordering for internal DSQs (David Vernet)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - scx: More include path and build updates (Tejun Heo)   
  - scx: Move common headers under include/scx (Tejun Heo)   
  - scx_{layered, rusty}: Minor build updates (Tejun Heo)   
  - scx_{rusty|layered}: Follow scx_utils::BpfBuilder API updates (Tejun Heo)   
  - scx_{rusty|layered}: Factor out build.rs's into scx_utils::build_helpers (Tejun Heo)   
  - scx_{rusty|layered}: Run bindgen's clang with CLANG_CFLAGS and remove explicit paths from includes (Tejun Heo)   
  - scx_{rusty|layered}: Make naming and build consistent between the two rust userland schedulers (Tejun Heo)   
  - scx_{rusty|layered}: ravg_read is now provided by scx_utils crate, remove .rs.h file (Tejun Heo)   
  - scx_{rusty|layered}: Generate skel file in $OUT_DIR (Tejun Heo)   
  - scx: Add s/uSIZE typedefs in scx_common.h (Tejun Heo)   
  - scx: Use .bpf.[sub]skel.h suffix instead of .[sub]skel.h when building schedulers (Tejun Heo)   
  - scx: Fix a straggling atomic64_set (Tejun Heo)   
  - scx: Move scx_ops_enable_state_str[] outside CONFIG_SCHED_DEBUG (Tejun Heo)   
  - rusty: Improve overview documentation as suggested by Josh Don (Tejun Heo)   
  - scx: Update print_scx_info() (Tejun Heo)   
  - scx: Update print_scx_info() comment (Tejun Heo)   
  - scx_rusty: doc comment update (Tejun Heo)   
  - scx: whitespace update (Tejun Heo)   
  - scx: Minor formatting updates and scx_bpf_error() formatting string param type update (Tejun Heo)   
  - scx: Rename scx_user_common.h to scx_common.h and include user_exit_info.h (Tejun Heo)   
  - scx: Reorder tools/sched_ext/README.md (Tejun Heo)   
  - scx: tools/sched_ext/Makefile updates (Tejun Heo)   
  - scx: s/scx_exit_type/scx_exit_kind/ s/scx_exit_info\.type/scx_exit_info\.kind/ (Tejun Heo)   
  - scx: Kill stray check_preempt_cur() prototype (Tejun Heo)   
  - scx: cpu_local_stat_show() doesn't have dependency on RT_GROUP_SCHED or EXT_GROUP_SCHED (Tejun Heo)   
  - scx: CGROUP_WEIGHT_* should be outside CONFIG_CGROUPS (Tejun Heo)   
  - scx: s/check_preempt_curr_scx/wakeup_preempt_scx/ to match new upstream naming (Tejun Heo)   
  - scx_layered: Cleanups (Tejun Heo)   
  - scx_layered: Use rust ravg_read() to read load instead of periodically updating from tick (Tejun Heo)   
  - scx_layered: s/__u[32|64]/u[32|64]/ (Tejun Heo)   
  - scx_layered: Use tp_btf/task_rename instead of fentry/__set_task_comm (Tejun Heo)   
  - scx_layered: Use the common ravg implementation (Tejun Heo)   
  - scx_layered: Updates as per David's review (Tejun Heo)   
  - scx_layered: Build fix after pulling tools/sched_ext Makefile change (Tejun Heo)   
  - scx_rusty: Misc update (Tejun Heo)   
  - tools/sched_ext/ravg: Separate out ravg_read.rs.h and update build deps (Tejun Heo)   
  - scx_common: Add message to _Static_assert in MEMBER_VPTR (Tejun Heo)   
  - scx: Print scx info when dumping stack (David Vernet)   
  - scx: Fix !CONFIG_SCHED_CLASS_EXT builds (David Vernet)   
  - scx_common: Improve MEMBER_VPTR() (Tejun Heo)   
  - tools/sched_ext/Makefile: Don't hard code scx_rusty in rust-sched _deps target (Tejun Heo)   
  - sched_ext/ravg: Drop unnecessary comment line (Tejun Heo)   
  - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)   
  - selftests/bpf: Disable CONFIG_DEBUG_INFO_REDUCED in config.aarch64 (Anders Roxell)   
  - sched_ext: Test sched_class directly in scx_task_iter_next_filtered() (Tejun Heo)   
  - scx_rusty: Comments, parameterize ravg half life (Tejun Heo)   
  - scx_rusty: Minor cleanup (Tejun Heo)   
  - scx_rusty: Improve debug messages (Tejun Heo)   
  - ravg: Fix ravg_transfer() (Tejun Heo)   
  - rusty: Fully switch to ravg (Tejun Heo)   
  - scx_rusty: Elide reading task loads if LB isn't necessary (Tejun Heo)   
  - scx_rusty: Drop unnnecessary read_volatiles from map elem access (Tejun Heo)   
  - scx_rusty: Switch to ravg dom loads (Tejun Heo)   
  - scx_rusty: ravg WIP (Tejun Heo)   
  - scx_common: libbpf now has inline iter decls, drop them from scx_common.bpf.h (Tejun Heo)   
  - bpftool: Fix prog object type in manpage (Artem Savkov)   
  - scx: Aggregate build logic for rust schedulers (David Vernet)   
  - scx: Don't rebuild schedulers unnecessarily (David Vernet)   
  - scx: Fix skel and .bpf.o Make deps (David Vernet)   
  - scx_rusty: Implement task load transfers (Tejun Heo)   
  - ravg: Drop scx_ prefix and implement ravg_transfer(). Misc rusty changes. (Tejun Heo)   
  - selftests/bpf: Consolidate VIRTIO/9P configs in config.vm file (Manu Bretelle)   
  - selftsets/bpf: Retry map update for non-preallocated per-cpu map (Hou Tao)   
  - selftests/bpf: Export map_update_retriable() (Hou Tao)   
  - selftests/bpf: Use value with enough-size when updating per-cpu map (Hou Tao)   
  - bpf: generalize reg_set_min_max() to handle two sets of two registers (Andrii Nakryiko)   
  - bpf: prepare reg_set_min_max for second set of registers (Andrii Nakryiko)   
  - bpf: unify 32-bit and 64-bit is_branch_taken logic (Andrii Nakryiko)   
  - bpf: generalize is_branch_taken to handle all conditional jumps in one place (Andrii Nakryiko)   
  - bpf: move is_branch_taken() down (Andrii Nakryiko)   
  - bpf: generalize is_branch_taken() to work with two registers (Andrii Nakryiko)   
  - bpf: rename is_branch_taken reg arguments to prepare for the second one (Andrii Nakryiko)   
  - bpf: drop knowledge-losing __reg_combine_{32,64}_into_{64,32} logic (Andrii Nakryiko)   
  - bpf: try harder to deduce register bounds from different numeric domains (Andrii Nakryiko)   
  - bpf: improve deduction of 64-bit bounds from 32-bit bounds (Andrii Nakryiko)   
  - bpf: add special smin32/smax32 derivation from 64-bit bounds (Andrii Nakryiko)   
  - bpf: derive subreg bounds from full bounds when upper 32 bits are constant (Andrii Nakryiko)   
  - bpf: derive smin32/smax32 from umin32/umax32 bounds (Andrii Nakryiko)   
  - bpf: derive smin/smax from umin/max bounds (Andrii Nakryiko)   
  - selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)   
  - selftests/bpf: fix RELEASE=1 build for tc_opts (Andrii Nakryiko)   
  - selftests/bpf: Add malloc failure checks in bpf_iter (Yuran Pereira)   
  - selftests/bpf: Convert CHECK macros to ASSERT_* macros in bpf_iter (Yuran Pereira)   
  - scx_rusty: ravg in progress, load transfer incomplete (Tejun Heo)   
  - scx_rusty: Use u64 and friends consistently and move dom_ctx def to .h (Tejun Heo)   
  - scx_rusty: Introduce lookup_task_ctx() and consistently use @taskc as task_ctx var name (Tejun Heo)   
  - scx_examples: Address the interaction between yield and slice based runtime calculation (Tejun Heo)   
  - sched_ext: Add scx_layered (Tejun Heo)   
  - scx: clean sched_ext example schedulers on root mrproper target (David Vernet)   
  - scx: Add missing build/ entry to .gitignore (David Vernet)   
  - scx: Improve example schedulers README file (David Vernet)   
  - rusty: Further tweak build system (David Vernet)   
  - scx: Don't specify nightly rustup as dependency (David Vernet)   
  - rusty: Support downloading rusty deps in separate build step (David Vernet)   
  - scx: Add Make help target for explaining build options (David Vernet)   
  - scx: Add make install target for installing schedulers (David Vernet)   
  - scx: Refactor and clean up build system (David Vernet)   
  - central: Pin timer to the central CPU (David Vernet)   
  - scx: Add missing piece (David Vernet)   
  - scx: Fix typo in tickless comment (David Vernet)   
  - central: Pin timer callbacks to central CPU (David Vernet)   
  - central: Allow specifying the slice length in the central scheduler (David Vernet)   
  - rusty: Don't use bpf_cpumask_full() to set task_ctx->all_cpus (Tejun Heo)   
  - scx_rusty: Keep .bpf.o files for debugging (Tejun Heo)   
  - Revert "Merge pull request #48 from sched-ext/rusty-keep-bpf-o" (Tejun Heo)   
  - scx_rusty: Keep .bpf.o files for debugging (Tejun Heo)   
  - xxx (Tejun Heo)   
  - scx: Fix p->scx.flags corruption due to unsynchronized writes of SCX_TASK_ON_DSQ_PRIQ (Tejun Heo)   
  - debug patches and fix (Tejun Heo)   
  - scx: bpf_scx_btf_struct_access() should return -EACCES for unknown accesses (Tejun Heo)   
  - use resizing of datasec maps in examples (inwardvessel)   
  - scx: Make p->scx.ops_state atomic_long_t instead of atomic64_t (Tejun Heo)   
  - scx: Use atomic_long_t for scx_nr_rejected instead of atomic64_t (Tejun Heo)   
  - scx: Allow calling some kfuncs from tracepoints (David Vernet)   
  - scx: Use unsigned long for rq->scx.pnt_seq instead of u64 (Tejun Heo)   
  - scx: Make cpumask arg to ops.set_cpumask() const (David Vernet)   
  - scx: Rename "type" -> "exit_type" (Dan Schatzberg)   
  - scx: Adjust a couple of small things in rusty.bpf.c (David Vernet)   
  - scx: Update clang dependency to 16.0 (David Vernet)   
  - scx: Fix README entry about rusty (David Vernet)   
  - scx: List bpf_cpumask_any_*_distribute() kfuncs in header (David Vernet)   
  - scx: Update kfree_rcu() to take rcu argument (David Vernet)   
  - scx: Rename scx_atropos to scx_rusty (David Vernet)   
  - scx: Fix some clippy warnings in Atropos (David Vernet)   
  - scx: Add new SCX_PANIC* macros (David Vernet)   
  - scx: Convert user space schedulers to use __{s,u}{32,64} types (David Vernet)   
  - scx: atropos: Use fb-procfs crate (Dan Schatzberg)   
  - scx: Make task_on_scx() take const task_struct (David Vernet)   
  - Update various dependencies (Daniel Müller)   
  - scx_pair: Fix custom stride error handling (Tejun Heo)   
  - SCX: Always imply NOCLOCK in sched_deq_and_put_task/sched_enq_and_set_task() (Tejun Heo)   
  - SCX: Build fixes when !CONFIG_SCHED_SMT or !CONFIG_CGROUP_SCHED (Tejun Heo)   
  - SCX: Drop implicit DEQUEUE_NOCLOCK from sched_deq_and_put_task() (Tejun Heo)   
  - sched, SCX: Drop SCHED_CHANGE_BLOCK (Tejun Heo)   
  - SCX: A couple cosmetic updates (Tejun Heo)   
  - SCX: Drop _example prefix from scheduler names and make the naming more consistent (Tejun Heo)   
  - SCX: Use "idle core" instead of "whole cpu" (Tejun Heo)   
  - SCX: Typo fix (Tejun Heo)   
  - SCX: s/task_on_scx()/task_should_scx()/ and add new task_on_scx() which tests current state (Tejun Heo)   
  - SCX: test_and_clear_cpu_idle() should always clear SMT mask (Tejun Heo)   
  - atropos: Use Instant instead of SystemTime (David Vernet)   
  - SCX: atropos: Update kicking during task migration across domains (Tejun Heo)   
  - SCX: atropos: Add scx_bpf_pick_any_cpu() and use it in atropos (Tejun Heo)   
  - SCX: Improve comments (Tejun Heo)   
  - SCX: Fix error handling in atropos_select_cpu() (Tejun Heo)   
  - SCX: Move idle_masks.smt clearing into test_and_clear_idle_cpu() (Tejun Heo)   
  - SCX: Use sched_smt_active() instead of testing sched_smt_present directly (Tejun Heo)   
  - SCX: atropos: Clean up offline CPU handling (Tejun Heo)   
  - SCX: atropos: Improve target CPU selection (Tejun Heo)   
  - SCX: atropos: Reorganize Scheduler (Tejun Heo)   
  - SCX: atropos: Replace fb_procfs with MyProcStat (Tejun Heo)   
  - SCX: atropos: Adjust load balance and greedy params (Tejun Heo)   
  - SCX: atropos: Add --balanced-kworkers (Tejun Heo)   
  - SCX: atropos: Fix vtime initialization (Tejun Heo)   
  - SCX: atropos: Fix execution bubble caused by enqueueing while on a foreign CPU (Tejun Heo)   
  - SCX: atropos: Fix padding size in struct pcpu_ctx (Tejun Heo)   
  - SCX: Disable ttwu_queue for tasks on SCX (Tejun Heo)   
  - SCX: atropos: Factor out / relocate utility functions (Tejun Heo)   
  - SCX: atropos: Replace bpf_loop() usages with the new inline loops (Tejun Heo)   
  - SCX: atropos: Cleanup the names of task_set_dsq() and friends (Tejun Heo)   
  - SCX: atropos: Clean up stats (Tejun Heo)   
  - SCX: atropos: A bunch of minor and cosmetic updates (Tejun Heo)   
  - SCX: simple, flatcg: Fix p->scx.dsq_vtime initialization (Tejun Heo)   
  - SCX: Prefer wholly idle CPUs in SMT machines (Tejun Heo)   
  - SCX: Implement SCX_PICK_IDLE_CPU_WHOLE (Tejun Heo)   
  - SCX: Remove scx_has_idle_cpus (Tejun Heo)   
  - scx: Update schedulers to use new bpf_rbtree semantics (David Vernet)   
  - sched_ext: Update code comment as scx_bpf_switch_all doesn't require 'into_scx' (shun159)   
  - sched_ext: Documentation: scx_bpf_dispatch() requires a slice (Eishun Kondoh)   
  - scx: Auto-release example scheduler struct_ops on program exit (David Vernet)   
  - scx: Enable .link struct_ops in sched_ext (David Vernet)   
  - Revert "scx: Auto-release example scheduler struct_ops on program exit" (David Vernet)   
  - scx: Auto-release example scheduler struct_ops on program exit (David Vernet)   
  - scx: Fix scx_example_userland missing NULL check (David Vernet)   
  - atropos: Remove static libclang dependency (Dan Schatzberg)   
  - scx: Further document example schedulers (David Vernet)   
  - scx: Call ops.set_weight() with rq lock on scx_post_fork() path (David Vernet)   
  - Atropos: Use slice_ns instead of SCX_SLICE_DFL (David Vernet)   
  - Atropos: Use slice_ns in BPF instead of slice_us (David Vernet)   
  - sched_ext: Add a rust userspace hybrid example scheduler (Dan Schatzberg)   
  - sched_ext: Add a basic, userland vruntime scheduler (David Vernet)   
  - sched_ext: Documentation: scheduler: Document extensible scheduler class (Tejun Heo)   
  - sched_ext: Add vtime-ordered priority queue to dispatch_q's (Tejun Heo)   
  - sched_ext: Implement core-sched support (Tejun Heo)   
  - sched_ext: Implement sched_ext_ops.cpu_online/offline() (Tejun Heo)   
  - sched_ext: Implement sched_ext_ops.cpu_acquire/release() (David Vernet)   
  - sched_ext: Implement SCX_KICK_WAIT (David Vernet)   
  - sched_ext: Add cgroup support (Tejun Heo)   
  - sched_ext: Track tasks that are subjects of the in-flight SCX operation (Tejun Heo)   
  - sched_ext: Implement tickless support (Tejun Heo)   
  - sched_ext: Add task state tracking operations (Tejun Heo)   
  - sched_ext: Make watchdog handle ops.dispatch() looping stall (Tejun Heo)   
  - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support (Tejun Heo)   
  - sched_ext: Allow BPF schedulers to switch all eligible tasks into sched_ext (Tejun Heo)   
  - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT (Tejun Heo)   
  - sched_ext: Implement runnable task stall watchdog (David Vernet)   
  - sched_ext: Add sysrq-S which disables the BPF scheduler (Tejun Heo)   
  - sched_ext: Add scx_example_simple and scx_example_qmap example schedulers (Tejun Heo)   
  - sched_ext: Implement BPF extensible scheduler class (Tejun Heo)   
  - sched_ext: Add boilerplate for extensible scheduler class (Tejun Heo)   
  - sched: Add normal_policy() (Tejun Heo)   
  - sched: Add @reason to sched_class->rq_{on|off}line() (Tejun Heo)   
  - sched: Enumerate CPU cgroup file types (Tejun Heo)   
  - sched: Expose css_tg(), __setscheduler_prio() and SCHED_CHANGE_BLOCK() (Tejun Heo)   
  - sched: Factor out cgroup weight conversion functions (Tejun Heo)   
  - sched: Add sched_class->switching_to() and expose check_class_changing/changed() (Tejun Heo)   
  - sched: Add sched_class->reweight_task() (Tejun Heo)   
  - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() (Tejun Heo)   
  - sched: Restructure sched_class order sanity checks in sched_init() (Tejun Heo)   
  - sched: Encapsulate task attribute change sequence into a helper macro (Tejun Heo)   
  - cgroup: Implement cgroup_show_cftypes() (Tejun Heo)


author: Tao Liu <ltao@redhat.com> - 2.0.23-3
changelog:
  - Update eppic to latest upstream snapshot
  - Update crashkernel-howto.txt
  - Remove references to systemd-sysv-convert
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - fadump: improve fadump-howto.txt about remote dump target setup
  - Don't exit 1 from 92-crashkernel.install if zipl is absent (#1993505)
  - Document/kexec-kdump-howto.txt: improve notes for kdump_pre and kdump_post scripts


author: Tao Liu <ltao@redhat.com> - 2.0.23-4
changelog:
  - Set zstd as the default compression method for kdump initrd
  - kdump-lib.sh: Escape '|' for 'failure_action|default' in is_dump_to_rootfs
  - dracut-early-kdump-module-setup.sh: install xargs and kdump-lib-initramfs.sh
  - update crashkernel-howto
  - set up kernel crashkernel for osbuild in kernel hook
  - reset kernel crashkernel for the special case where the kernel is updated right after kexec-tools
  - try to reset kernel crashkernel when kexec-tools updates the default crashkernel value
  - introduce the auto_reset_crashkernel option to kdump.conf
  - rewrite reset_crashkernel to support fadump and to used by RPM scriptlet
  - fix incorrect usage of rpm-ostree to update kernel command line parameters
  - add helper functions to get kernel path by kernel release and the path of current running kernel
  - add helper functions to get dump mode
  - add a helper function to read kernel cmdline parameter from grubby --info
  - provide kdumpctl get-default-crashkernel for kdump_anaconda_addon and RPM scriptlet
  - factor out kdump_get_arch_recommend_crashkernel
  - update default crashkernel value
  - ppc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs


author: Tao Liu <ltao@redhat.com> - 2.0.23-5
changelog:
  - Set zstd as recommented for kexec-tools
  - fix "kdump: Invalid kdump config option auto_reset_crashkernel" error
  - use grep -s to suppress error messages about nonexistent or unreadable files


author: Tao Liu <ltao@redhat.com> - 2.0.23-6
changelog:
  - Revert "Remove trace_buf_size and trace_event from the kernel bootparameters of the kdump kernel"
  - fix broken kdump_get_arch_recommend_size
  - remove the upper bound of 102400T for the range in default crashkernel
  - fix the error of parsing the container environ variable for osbuild
  - mkdumprd (RHEL-only): add nvme module by force
  - Remove dropped patches
  - s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel()
  - spec: add hostname.rpm into Recommends list
  - move variable FENCE_KDUMP_SEND from kdump-lib.sh to kdump-lib-initramfs.sh


author: Tao Liu <ltao@redhat.com> - 2.0.23-7
changelog:
  - fix incorrect usage of _get_all_kernels_from_grubby
  - fix the mistake of swapping function parameters of read_proc_environ_var


author: Tao Liu <ltao@redhat.com> - 2.0.23-9_1
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg


author: EL Errata <el-errata_ww@oracle.com> - 2.0.23-9_1.0.1
changelog:
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]


author: Brian Maly <brian.maly@oracle.com> - 2.0.23-9_1.0.2
changelog:
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]


author: Tao Liu <ltao@redhat.com> - 2.0.23-10
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg
  - s390: add support for --reuse-cmdline
  - use slurp_proc_file() in get_command_line()
  - add slurp_proc_file()
  - s390: use KEXEC_ALL_OPTIONS
  - s390: add variable command line size
  - util_lib/elf_info: harden parsing of printk buffer
  - print error when reading with unsupported compression
  - use cycle detection when parsing the prink log_buf
  - use pointer arithmetics for dump_dmesg
  - add generic cycle detection


author: Tao Liu <ltao@redhat.com> - 2.0.24-1
changelog:
  - Rebase kexec-tools to v2.0.24
  - Rebase makedumpfile to 1.7.1
  - Avoid false-positive mem_section validation with vmlinux


author: Tao Liu <ltao@redhat.com> - 2.0.24-2
changelog:
  - remove the upper bound of default crashkernel value example
  - update fadump-howto
  - update kexec-kdump-howto
  - update crashkernel-howto
  - add man documentation for kdumpctl get-default-crashkernel
  - improve get_recommend_size
  - fix a calculation error in get_system_size


author: Tao Liu <ltao@redhat.com> - 2.0.24-4
changelog:
  - crashkernel: optimize arm64 reserved size if PAGE_SIZE=4k
  - kdump-lib.sh: Check the output of blkid with sed instead of eval


author: John Mcwalters <john.mcwalters@oracle.com> - 2.0.24-5.0.1
changelog:
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34240246-Update-UEK-reserved-sizes.patch [Orabug: 34240246]
  - Add back kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 22780125]
  - Add back kexec-tools-2.0.17-dracut-module-setup-ip_dhcp-avoid-dup-config.patch [Orabug: 29518713]


author: Tao Liu <ltao@redhat.com> - 2.0.25-6
changelog:
  - Simplify setup_znet by copying connection profile to initrd
  - Wait for the network to be truly ready before dumping vmcore
  - Address the cases where a NIC has a different name in kdump kernel
  - Reduce kdump memory consumption by only installing needed NIC drivers
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces
  - Set up kdump network by directly copying NM connection profile to initrd
  - Stop dracut 35network-manager from running nm-initrd-generator
  - Apply the timeout configuration of nm-initrd-generator
  - Determine whether IPv4 or IPv6 is needed
  - Add functions to copy NetworkManage connection profiles to the initramfs
  - Fix error for vlan over team network interface


author: Tao Liu <ltao@redhat.com> - 2.0.25-8
changelog:
  - kexec-tools: ppc64: remove rma_top limit
  - kdumpctl: Optimize _find_kernel_path_by_release regex string
  - kdump.conf: use a simple generator script to maintain


author: Tao Liu <ltao@redhat.com> - 2.0.25-9
changelog:
  - Add virtiofs to kdump supported-kdump-targets.txt
  - dracut-module-setup.sh: stop overwriting dracut's trap handler


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-10
changelog:
  - Update supported-kdump-targets.txt
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Don't try to update crashkernel when bootloader is not installed
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking
  - fadump: use 'zstd' as the default compression method
  - fadump: fix default initrd backup and restore logic
  - fadump: add a kernel install hook to clean up fadump initramfs
  - fadump: avoid status check while starting in fadump mode
  - spec: only install mkfadumprd for ppc
  - fadump: preserve file modification time to help with hardlinking
  - fadump: do not use squash to reduce image size


author: Tao Liu <ltao@redhat.com> - 2.0.25-12
changelog:
  - Reset crashkernel to default value if newly installed kernel has crashkernel=auto
  - Use the correct command to get architecture


author: Tao Liu <ltao@redhat.com> - 2.0.25-13
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: EL Errata <el-errata_ww@oracle.com> - 2.0.25-13.0.1
changelog:
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.26-2
changelog:
  - Rebase makedumpfile to upstream latest(8e8b8814be1)
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile


author: Tao Liu <ltao@redhat.com> - 2.0.26-3
changelog:
  - Rebase makedumpfile to v1.7.3
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel


author: Tao Liu <ltao@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdump-lib: fix prepare_cmdline
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS


author: Tao Liu <ltao@redhat.com> - 2.0.26-5
changelog:
  - Add lvm thin provision to kdump supported-kdump-targets.txt
  - mkdumprd: Use the correct syntax to redirect the stderr to null


author: Tao Liu <ltao@redhat.com> - 2.0.26-6
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()
  - Simplify the management of the kernel parameter crashkernel
  - kdump-lib: fix the matching pattern for debug-kernel
  - kdump-lib: always specify version in is_squash_available


author: Tao Liu <ltao@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix temporary directory location
  - kdump-lib: Match 64k debug kernel in prepare_kdump_bootinfo()


author: EL Errata <el-errata_ww@oracle.com> - 2.0.26-8.0.1
changelog:
  - backport of upstream crash hotplug support [Orabug: 35884469]
  - Insert new udev rules for crash hotplug into 98-kexec.rules [Orabug: 35801595]
  - Handle xen_netfront in dracut module setup [Orabug: 35615400]
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.27-3
changelog:
  - Rebase makedumpfile to v1.7.4
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Tao Liu <ltao@redhat.com> - 2.0.27-4
changelog:
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges
  - kdump-lib: Harden _crashkernel_add


author: Tao Liu <ltao@redhat.com> - 2.0.27-7
changelog:
  - Explain the auto_reset_crashkernel option in more details
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually


author: Tao Liu <ltao@redhat.com> - 2.0.27-8.2
changelog:
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Darren Archibald <darren.archibald@oracle.com> - 2.0.28-1.0.6
changelog:
  - Fix KEXEC_KERNEL_CHECK IMA rule & valid PE signature regression [Orabug: 36567412]
  - Include support for virt-what [Orabug: 36517679]
  - backport of upstream crash hotplug support [Orabug: 35884469]
  - Insert new udev rules for crash hotplug into 98-kexec.rules [Orabug: 35801595]
  - Handle xen_netfront in dracut module setup [Orabug: 35615400]
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.27-13
changelog:
  - kdump-lib: Drop 'file' dependency in is_uki
  - kdumpctl.8: Add description to reset-crashkernel --reboot
  - kdumpctl: Fix misleading message and erratic reboot in reset_crashkernel
  - kdumpctl: Drop default kexec '-d' option


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: EL Errata <el-errata_ww@oracle.com> - 2.0.29-5.0.1
changelog:
  - Rebase makedumpfile to v1.7.6 [Orabug: 37289579]
  - Fix KEXEC_KERNEL_CHECK IMA rule & valid PE signature regression [Orabug: 36567412]
  - Include support for virt-what [Orabug: 36517679]
  - backport of upstream crash hotplug support [Orabug: 35884469]
  - Insert new udev rules for crash hotplug into 98-kexec.rules [Orabug: 35801595]
  - Handle xen_netfront in dracut module setup [Orabug: 35615400]
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]
  - Rebase kexec-tools to v2.0.28


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: EL Errata <el-errata_ww@oracle.com> - 28-10.0.1
changelog:
  - weak-modules: Fix add_kernel to handle suffix [Orabug: 34623248] (Todd Vierling)
  - add weak-modules patch for [Orabug: 26672773]


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> - 28-10.0.2
changelog:
  - Add improvement to modprobe to handle UEK8 packaging better [Orabug: 37689559] (Harshit Mogalapalli)


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.18-46
changelog:
  - Temporarily dropped a check that validates the logical size specified from
    the table line.
  - Related: rhbz#2071648


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.21-46
changelog:
  - Fixed a bug where I/O errors on data reads from below a vdo were ignored.
  - Resolves: rhbz#2125708


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.2.1.6-102.el9
changelog:
  - Reverted commits from RHEL-17420.
  - Reverts: RHEL-17420
  - Rebuilt for latest kernel.
  - Resolves: RHEL-23075


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.2.4.15-136.el9
changelog:
  - Fixed null pointer error with timed-out dedupt contexts.
  - Made timed-out dedupe contexts available for reuse sooner.
  - Added build support for more kernel versions.
  - Resolves: RHEL-42515


author: - Chung Chung <cchung@redhat.com> - 8.2.5.2-155.el9
changelog:
  - TEMPORARY FIX to correct build failures regarding blk_limits_io_{min,opt} error
  - Related: RHEL-61201


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
  - Resolves: rhbz#2209715
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
  - Resolves: rhbz#2209717
  - Allow to set PAC ticket signature as optional
  - Resolves: rhbz#2211388


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45401 RHEL-45390


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.0.1
changelog:
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.65.0-5.1
changelog:
  - advisory upgrade: filter out advPkgs with different arch
  - Add obsoletes to filtering for advisory candidates


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: EL Errata <el-errata_ww@oracle.com> - 0.69.0-12.0.1
changelog:
  - Recognise new kernel-uek RPMs as multiversion and installonlypkg [Orabug: 36053872]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Darren Archibald <darren.archibald@oracle.com> - 1.46.1-3.0.1
changelog:
  - Replace upstream references from a description tag
  - Fix build on Oracle Linux [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: EL Errata <el-errata_ww@oracle.com> - 1.46.1-4.0.1
changelog:
  - Add btrfs-progs to the packages installed in the appliance [Orabug: 34137448]
  - Replace upstream references from a description tag
  - Fix build on Oracle Linux [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2075539 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072959 - Use right sdap_domain in ad_domain_info_send [rhel-9.0.0.z]
  - Resolves: rhbz#2089251 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128902 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2141830 - SSS_CLIENT: fix thread unsafe access to get*ent structs. [rhel-9.1.0.z]
  - Resolves: rhbz#2139870 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-9.1.0.z]
  - Resolves: rhbz#2142960 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-9.1.0.z]
  - Resolves: rhbz#2148988 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152884 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Darren Archibald <darren.archibald@oracle.com> - 2.8.2-3
changelog:
  - Resolves: rhbz#2196839 - [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2219353 - SSSD enters failed state after heavy load in the system.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [RHEL-19213]
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [RHEL-19993]
  - SSSD GPO lacks group resolution on hosts [RHEL-21089]
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code [RHEL-21165]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Diaa Sami <disami@redhat.com> - 2.9.4-6.1
changelog:
  - Resolves: RHEL-33896 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.5-4.4
changelog:
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: EL Errata <el-errata_ww@oracle.com> - 2.5.4-26.0.1
changelog:
  - Disable nfs-utils-2.5.4-gssd-bad-integ-error-support.patch [Orabug: 36563788]
  - spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 36044562]


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: EL Errata <el-errata_ww@oracle.com> - 7.1.8.1-11.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Build with --with-vendor="Oracle America, Inc."
  - Added the --with-hamcrest option to configure.


author: Darren Archibald <darren.archibald@oracle.com> - 1:7.1.8.1-12.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Added the --with-hamcrest option to configure.


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: EL Errata <el-errata_ww@oracle.com> - 2.15.2-6.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla
  - Remove options interacting with Bugzilla [Orabug: 32895080]


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-7.el9_3.1
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-10.1
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85906
    Resolves: RHEL-85912
    Resolves: RHEL-85919
    Resolves: RHEL-87061
    Resolves: RHEL-87069
    Resolves: RHEL-87102
    Resolves: RHEL-87120
    Resolves: RHEL-88364
    Resolves: RHEL-88367


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-10.2
changelog:
  - Backport patches for various CVEs
    Resolves: RHEL-85888
    Resolves: RHEL-87081
    Resolves: RHEL-88332
    Resolves: RHEL-92285


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Tomas Popela <tpopela@redhat.com> - 2.72.0-8.el9_5.1
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Resolves: RHEL-67080


author: Tomas Popela <tpopela@redhat.com> - 2.72.0-8.el9_5.2
changelog:
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67068


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-8.3
changelog:
  - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
    Resolves: RHEL-76381


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-2
changelog:
  - Fix FAT mkfs with dosfstools >= 4.2
  - udiskslinuxdriveata: Use GTask to apply configuration in a thread
  - Limit allowed module names
  - 80-udisks2.rules: Ignore Apple boot partition from livecd-tools


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing (RHEL-7386)
  - qemu: virtiofs: set correct label when creating the socket (RHEL-7386)
  - qemu: virtiofs: error out if getting the group or user name fails (RHEL-7386)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6.1.el9_4
changelog:
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441, RHEL-25081)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6.6.el9_4
changelog:
  - vmx: Do not require DVS Port ID (RHEL-45520)
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46595)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7.2.el9_6
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83076)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83076)
  - rpc: remove logind support for virNetDaemon (RHEL-83076)
  - util: fix off-by-1 in inhibitor constants (RHEL-83076)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83076)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83076)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-84689)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-84782)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-84782)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-84782)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-84782)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-84782)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7.3.el9_6
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88449)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88449)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88449)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88449)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-1
changelog:
  - Rebased to libvirt-10.5.0 (RHEL-21381)
  - The rebase also fixes the following bugs:
      RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
      RHEL-43309


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-6
changelog:
  - udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) (CVE-2024-8235, RHEL-55373)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7
changelog:
  - qemu: Refactor default panic model (RHEL-56451)
  - qemu: Sometimes the default panic model doesn't exist (RHEL-56451)
  - qemu: Use pvpanic by default on aarch64 (RHEL-56451)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.1.el9_5
changelog:
  - qemu: migration: Pre-create QCOW2 images for non-shared storage with 0 allocation (RHEL-61177)
  - virTypedParamsFilter: Adjust return type and docs (RHEL-61177)
  - virTypedParamsGetStringList: Refactor and adjust docs (RHEL-61177)
  - virTypedParamsFilter: Introduce option to filter also by type (RHEL-61177)
  - virTypedParamsGetStringList: Ensure that returned array is NULL if there are no matching fields (RHEL-61177)
  - virTypedParamsGetStringList: Ensure that returned string list is NULL-terminated (RHEL-61177)
  - qemuMigrationSrcBeginPhaseBlockDirtyBitmaps: Use qemuMigrationAnyCopyDisk() (RHEL-61177)
  - qemu: migration: Don't log 'nmigrate_disks' (RHEL-61177)
  - qemu: migration: Avoid use of 'nmigration_disks' (RHEL-61177)
  - qemu: migration: Extract validation of disk target list (RHEL-61177)
  - qemu: migration: Remove 'nmigration_disks' variable from all places (RHEL-61177)
  - qemu: Introduce and wire in 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES' (RHEL-61177)
  - virsh: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES migration parameter (RHEL-61177)
  - qemu: migration: Fix blockdev config with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES (RHEL-61177)
  - docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES (RHEL-61177)
  - util: Look for newer name of cpu wait time statistic (RHEL-61511)
  - vmx: Allow '*' to appear in VMX file keys (RHEL-58677)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.2.el9_5
changelog:
  - qemu: Add support for postcopy-recover-setup migration state (RHEL-63877)
  - qemu: Avoid false failure when resuming post-copy migration (RHEL-63877)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.3.el9_5
changelog:
  - libvirt_private.syms: Export virDomainIOMMUDefNew() (RHEL-69725)
  - qemu: Turn EIM IOMMU on automagically (RHEL-69725)
  - qemu_domain: Automagically add IOMMU if needed (RHEL-69725)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.4.el9_5
changelog:
  - qemu: Enable I/O APIC if needed (RHEL-69725)
  - qemu: Enable I/O APIC even more frequently (RHEL-69725)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-0rc1.1
changelog:
  - Rebased to libvirt-8.0.0-rc1 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2034539, rhbz#2027400, rhbz#1945420, rhbz#1851249, rhbz#2032410
      rhbz#2026812, rhbz#2032365, rhbz#2035888, rhbz#2036895, rhbz#2026537


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-1
changelog:
  - Rebased to libvirt-8.0.0 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2039246, rhbz#2039652, rhbz#2039651, rhbz#2039131


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - build: Only install libvirt-guests when building libvirtd (rhbz#2042529)
  - docs: Add man page for libvirt-guests (rhbz#2042529)
  - remove sysconfig files (rhbz#2042529)
  - spec: Run pre/post-install stuff on 'daemon-driver-storage-core' (rhbz#2025644)
  - qemu: fix inactive snapshot revert (rhbz#2039136)
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2043579)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2047271)
  - qemu: Validate domain definition even on migration (rhbz#2048435)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - Make systemd unit ordering more robust (rhbz#1868537)
  - util: Fix machined servicename (rhbz#1868537)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-7
changelog:
  - nwfilter: hold filter update lock when creating/deleting bindings (rhbz#2044379)
  - qemu,lxc: remove use to nwfilter update lock (rhbz#2044379)
  - qemu: support multiqueue for vdpa net device (rhbz#2024406)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-8.1.el9_0
changelog:
  - conf: Introduce memory allocation threads (rhbz#2075628)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2075628)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2075628)
  - qemu_command: Generate prealloc-threads property (rhbz#2075628)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-8.5.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1475431, rhbz#2026765, rhbz#2059511, rhbz#2089431, rhbz#2102009


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-7.2.el9_1
changelog:
  - kbase: Document QEMU private mount NS limitations (rhbz#2152083)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2152083)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2152083)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2152083)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2152083)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2152083)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-7.3.el9_1
changelog:
  - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2154410)
  - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2154410)
  - util: Extend virProcessGetStatInfo() for sysTime and userTime (rhbz#2157094)
  - qemu: Implement qemuDomainGetStatsCpu fallback for qemu:///session (rhbz#2157094)
  - RHEL: rpminspect: Disable abidiff inspection


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-8
changelog:
  - docs: Fix examples in virt-qemu-sev-validate man page (rhbz#2172347)
  - docs: refer to --firmware instead of --loader (rhbz#2172347)
  - rpm: add missing deps for the virt-qemu-sev-validate (rhbz#2172347)
  - docs/kbase: fix example for SEV validation (rhbz#2172347)
  - qemu_passt: Report error when getting passt PID failed (rhbz#2169244)
  - qemu_passt: Avoid double daemonizing passt (rhbz#2169244)
  - qemu_passt: Report passt's error on failed start (rhbz#2169244)
  - qemu_passt: Deduplicate passt killing code (rhbz#2169244)
  - qemu_passt: Let passt write the PID file (rhbz#2169244)
  - qemu_passt: Remove passt socket file on exit (rhbz#2169244)
  - tests: qemucapabilitiesdata: Update for the qemu-8.0 development cycle (rhbz#2172098)
  - qemu: capabilities: Introduce QEMU_CAPS_NETDEV_STREAM_RECONNECT (rhbz#2172098)
  - qemu: add reconnect=5 to passt qemu commandline options when available (rhbz#2172098)
  - qemu: respond to NETDEV_STREAM_DISCONNECTED event (rhbz#2172098)
  - qemu: domain: Fix logic when tainting domain (rhbz#2174446)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174446)
  - qemu: validate: Fix logic for validating presence of the HPET timer (rhbz#2175813)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-9
changelog:
  - util: add an API to retrieve the resolved path to a virCommand's binary (rhbz#2172267)
  - security: make args to virSecuritySELinuxContextAddRange() const (rhbz#2172267)
  - security: make it possible to set SELinux label of child process from its binary (rhbz#2172267)
  - qemu: set SELinux label of passt process to its own binary's label (rhbz#2172267)
  - rpm: Recommend passt-selinux (rhbz#2172267)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-10.1.el9_2
changelog:
  - virnuma: Move virNumaNodesetToCPUset() out of WITH_NUMACTL (rhbz#2185039)
  - virnuma: Introduce virNumaCPUSetToNodeset() (rhbz#2185039)
  - virnumamock: Introduce virNumaGetNodeOfCPU() mock (rhbz#2185039)
  - qemuxml2argvtest: Use virnuma mock (rhbz#2185039)
  - qemuxml2argvdata: Adjust maximum NUMA node used (rhbz#2185039)
  - qemuxml2argvdata: Extend vCPUs placement in memory-hotplug-dimm-addr.xml (rhbz#2185039)
  - qemuxml2argvmock: Drop virNuma* mocks (rhbz#2185039)
  - qemu: Move cpuset preference evaluation into a separate function (rhbz#2185039)
  - qemu: Fix qemuDomainGetEmulatorPinInfo() (rhbz#2185039)
  - qemuBuildMemoryBackendProps: Join two conditions (rhbz#2185039)
  - qemu: Add @nodemaskRet argument to qemuBuildMemoryBackendProps() (rhbz#2185039)
  - qemu: Add @nodemask argument to qemuBuildThreadContextProps() (rhbz#2185039)
  - qemuBuildThreadContextProps: Prune .node-affinity wrt <emulatorpin/> (rhbz#2185039)
  - docs: Document memory allocation and emulator pinning limitation (rhbz#2185039)
  - conf: Fix migration in some firmware autoselection scenarios (rhbz#2186383)


author: Jiri Denemark <jdenemar@redhat.com> - 9.4.0-1
changelog:
  - Rebased to libvirt-9.4.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946
      rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-0rc1.1
changelog:
  - Rebased to libvirt-9.5.0-rc1 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860
      rhbz#2138150, rhbz#2171384


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-2
changelog:
  - nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
  - nodedev: refactor mdevctl thread functions (rhbz#2143158)
  - nodedev: update mdevs from the mdevctl thread (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-3
changelog:
  - tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
  - tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
  - qemu: add run-with async-teardown capability (rhbz#2168499)
  - qemu: allow use of async teardown in domain (rhbz#2168499)
  - conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
  - qemu: S390 does not provide physical address size (rhbz#2224016)
  - nodedev: report mdev persistence properly (rhbz#2143158)
  - node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-4
changelog:
  - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-5
changelog:
  - Revert "qemu_passt: Actually use @logfd" (rhbz#2209191)
  - Revert "qemu_passt: Precreate passt logfile" (rhbz#2209191)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Shaleen Bathla <shaleen.bathla@oracle.com> - 9.5.0-6.0.1
changelog:
  - The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744)
  - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-7
changelog:
  - util: use "stubDriverType" instead of just "stubDriver" (rhbz#2074209)
  - util: add stub driver name to virPCIDevice object (rhbz#2074209)
  - util: rename virPCIDeviceGetDriverPathAndName (rhbz#2074209)
  - util: permit existing binding to VFIO variant driver (rhbz#2074209)
  - util: probe stub driver from within function that binds to stub driver (rhbz#2074209)
  - util: honor stubDriverName when probing/binding stub driver for a device (rhbz#2074209)
  - node_device: support binding other drivers with virNodeDeviceDetachFlags() (rhbz#2074209)
  - qemu: turn two multiline log messages into single line (rhbz#2074209)
  - docs: update description of virsh nodedev-detach --driver option (rhbz#2074209)
  - rpm: Fix typo in daemon name (rhbz#2236057)
  - rpm: Recommend libvirt-daemon for with_modular_daemons distros (rhbz#2236500)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Darren Archibald <darren.archibald@oracle.com> - 1.9.0-7
changelog:
  - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
    Resolves: rhbz#2241191
  - crash related to VP9 encoding in libvpx (CVE-2023-44488)
    Resolves: rhbz#2241806


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: EL Errata <el-errata_ww@oracle.com> - 1.1.34-13.0.1
changelog:
  - Fix memory leak in exclPrefixPush [Orabug: 37871881]
  - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j16  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6.el9_2.2
changelog:
  - don't re-arm fault clearing timer on unrelated netlink events (#2208265)
  - clear pending errors on sockets (#2208210)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-2.el9_4.1
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-44677)
  - fix ts2phc to correctly handle leap seconds (RHEL-44679)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-44683)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3.el9_5.1
changelog:
  - add option to ts2phc to specify minimum expected NMEA delay (RHEL-70168)
  - don't require -O option without -a and -w in phc2sys (RHEL-70678)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.1-4
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: EL Errata <el-errata_ww@oracle.com> - 179-2.0.1
changelog:
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Lans Hung <lans.hung@oracle.com> - 179-2.0.2
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]


author: EL Errata <el-errata_ww@oracle.com> - 182-3.0.1
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: EL Errata <el-errata_ww@oracle.com> - 4.2-14.0.1
changelog:
  - super1: remove support for name= in config. [Orabug 36958575]
  - mdadm: Increase number limit in md device name to 1024. [Orabug: 36958528]
  - Fix socket connection failure when mdmon runs in foreground mode. [Orabug: 36077756]


author: EL Errata <el-errata_ww@oracle.com> - 4.3-3.0.1
changelog:
  - mdadm: Increase number limit in md device name to 1024. [Orabug: 36958528]
  - Fix socket connection failure when mdmon runs in foreground mode. [Orabug: 36077756]


author: Akshata Konala <akshata.konala@oracle.com> - 4.3-4.0.1
changelog:
  - mdmon: imsm: fix metadata corruption when managing new array. [Orabug: 37635990]
  - Fix socket connection failure when mdmon runs in foreground mode. [Orabug: 36077756]


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-32
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1.el9_6.1
changelog:
  Resolves: RHEL-86224 - mod_auth_openidc allows OIDCProviderAuthRequestMethod
              POSTs to leak protected data (CVE-2025-31492)


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1.el9_6.2
changelog:
  Resolves: RHEL-95948 - mod_auth_openidc: DoS via Empty POST in mod_auth_openidc
              with OIDCPreservePost Enabled (CVE-2025-3891)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.2-2
changelog:
  - More efficient cache and cow filters.
  - Add nbdkit-cow-filter cow-on-read option.
  - Add nbdkit-cache-filter cache-on-read=/PATH.
  - Add nbdkit-cache-filter cache-min-block-size option.
  - Add nbdkit-delay-filter delay-open and delay-close options.
  - Reduce verbosity of debugging from virt-v2v.
  - Miscellaneous bugfixes
    resolves: rhbz#1950632


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-2
changelog:
  - vddk: Avoid reading partial chunk beyond the end of the disk
    resolves: RHEL-82831
  - Fix tests/test-ext2-exportname.sh.


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Stepan Broz <sbroz@redhat.com> - 1:5.9.1-13.3
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-32062)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-4
changelog:
  - Install an improved sample config
  - Fix permissions of osf-related configs
  - rule: Fix for potential off-by-one in cmd_add_loc()
  - netlink_delinearize: Fix suspicious calloc() call
  - netlink: Avoid memleak in error path of netlink_delinearize_obj()
  - netlink: Avoid memleak in error path of netlink_delinearize_table()
  - netlink: Avoid memleak in error path of netlink_delinearize_chain()
  - netlink: Avoid memleak in error path of netlink_delinearize_set()
  - json: Drop pointless assignment in exthdr_expr_json()
  - evaluate: Mark fall through case in str2hooknum()
  - parser_json: Fix for memleak in tcp option error path
  - parser_bison: Fix for implicit declaration of isalnum
  - main: fix nft --help output fallout from 719e4427
  - tests: add icmp/6 test where dependency should be left alone
  - payload: check icmp dependency before removing previous icmp expression


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-8
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
  - segtree: Fix segfault when restoring a huge interval set


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: EL Errata <el-errata_ww@oracle.com> - 1.20.1-13.0.1
changelog:
  - Reference oracle-indexhtml within Requires [Orabug: 33802044]
  - Remove Red Hat references [Orabug: 29498217]


author: Alan Steinberg <alan.steinberg@oracle.com> - 1:1.20.1-14.0.1.1
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Darren Archibald <darren.archibald@oracle.com> - 2:1.20.1-20.0.1
changelog:
  - Reference oracle-indexhtml within Requires [Orabug: 33802044]
  - Remove Red Hat references [Orabug: 29498217]
  - Update upstream references [Orabug: 36579090]


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-22.1
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-22.2
changelog:
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 2:1.20.1-22.3
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4.0.1
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Fix gc mode on blackhole route. RHEL-58666
  - Only search desired interface for storing route rule. RHEL-60261


author: Wen Liang <wenliang@redhat.com> - 2.2.39-1
changelog:
  - Upgrade to 2.2.39
  - Fix VLAN interface being removed unnecessarily due to route mismatches triggering deactivations. RHEL-65031


author: Íñigo Huguet <ihuguet@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Provide an option to disable only nmstate log in python API (RHEL-76316)
  - Remove down up workaround for route removal in Nmstate (RHEL-75151)


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41.
  - Support nm connection with empty connection.interface-name (RHEL-82661)
  - Fix ovsdb purging issue (RHEL-79176)


author: Wen Liang <wenliang@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support ethtool Forward Error Correction (FEC). RHEL-80786
  - Support nm connection with empty connection.interface-name. RHEL-82662


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1:16.20.2-4.0.1
changelog:
  - reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
    Resolves: CVE-2024-22019


author: Jan Staněk <jstanek@redhat.com> - 1:16.14.0-5
changelog:
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: David Sloboda <david.x.sloboda@oracle.com> - 1:18.20.2-2
changelog:
  - Removes .ps1 files
  - Rebase to 18.20.2
  - Fixes: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes: CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes: CVE-2024-25629 (c-ares)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81158


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-6
changelog:
  - Remove debugging printf from a patch
  - increase the pbe cache size to handle reusing the same token key.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Craig Guiller <craig.guiller@oracle.com> - 3.90.0-4
changelog:
  - CVE-2023-5388
      nss: timing attack against RSA decryption.
      Make the final blinding multmod constant time.


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Ashish Samant <ashish.samant@oracle.com> - 1.8.6-11
changelog:
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish
    Samant)  [Orabug: 28804934]


author: Gautham Ananthakrishna <gautham.ananthakrishna@oracle.com> - 1.8.6-17.el9
changelog:
  - libocfs2: fix non-zero value in Next Leaf field in the rightmost leaf metadata
    block (Gautham Ananthakrishna)  [Orabug: 36975814]


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85582


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.2.0-1
changelog:
  - Add support for OCI multipart upload
  - Bug 34801218 - Implement multi-part copy to Object Storage
  - Fixes issues with using NFS over OCIFS
  - Bug 35750005 - OCIFS doesn't work properly with NFS


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.2.0-2
changelog:
  - Multipart upload abort can take a long time
  - Improve the request retry strategy
  - Do not retry flush on error
  - Improve error reporting
  - Bug 34979749 - "UnspecifiedError" message is displayed when oci region doesn't match with bucket
  - Bug 35976981 - Option mpu-nparts=10000 does not work with OCIFS 1.2.0-1
  - Bug 36652835 - Permissions of the root of an OCIFS filesystem cannot be changed


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.2.0-5
changelog:
  - Fix request retry
  - Fix partial update of uncached files
  - Add test for partial update of a file
  - Bug 36984693 - Error while copying 1GB file when ocifs is configured with --mpu-nparts=1000 and --mpu-nthreads=1000


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 1.2.0-6
changelog:
  - Instance principal authentication doesn't work across regions
  - Refresh of security token can crash
  - Request can crash on retry
  - Remove the --mpu-nthreads and --mpu-nparts options
  - Bug 36984693 - Error while copying 1GB file when ocifs is configured with --mpu-nparts=1000 and --mpu-nthreads=1000


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: EL Errata <el-errata_ww@oracle.com> - 10.11.0.2-1.0.1
changelog:
  - Add oracle-linux.patch
  - Add modify_to_suitable_os_release.patch
  - Added patch to properly identify oracle as redhat (Alex Burmashev)


author: EL Errata <el-errata_ww@oracle.com> - 10.11.0.2-1.0.1
changelog:
  - Support os_vendor checking for OL
  - Add modify_to_suitable_os_release.patch
  - Added patch to identify OL as redhat vendor (Alex Burmashev)


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
changelog:
  - Package new upstream version open-vm-tools-11.2.5-17337674.
  - libdnet dependency was removed in open-vm-tools 11.0.0. So,
    removed the stale BuildRequires for libdnet.


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
changelog:
  - ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
  - ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
  - Resolves: bz#1936382
    ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
  - Resolves: bz#1954040
    ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
changelog:
  - Rebase to 11.3.0 [bz#1974471]
  - Resolves: bz#1974471
    ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
changelog:
  - Rebase to 11.3.5 [bz#2008243]
  - Resolves: bz#2008243
    ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)


author: EL Errata <el-errata_ww@oracle.com> - 11.3.5-1.0.1
changelog:
  - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
  - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
  - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1.el9_0.1
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119285]
  - Resolves: bz#2119285
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090275]
  - Resolves: bz#2090275
    ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119286]
  - Resolves: bz#2119286
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 12.1.5-1.0.2
changelog:
  - [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Darren Archibald <darren.archibald@oracle.com> - 12.2.5-3.0.1.2
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.16.0-10
changelog:
  - Resolves: #1987186, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.17.0-8
changelog:
  - Resolves: #2127873, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-5
changelog:
  - opencryptoki C_GenerateKeyPair() fails after generating > 500 RSA keys with CEX7 crypto cards
  Resolves: #2128611


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
    The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Change STRIP to STRIP_OPTS
    Add export symbols related to LDAP_CONNECTIONLESS
    Related: rhbz#2117752


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: John McWalters <john.mcwalters@oracle.com> - 1.3.10-2.0.1
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Federico Ramírez <federico.r.ramirez@oracle.com> - 1:1.3.6-3.0.4
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]


author: EL Errata <el-errata_ww@oracle.com> - 1.3.6-4.0.1
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Mark Haywood <mark.haywood@oracle.com> - 5:3.3.24-1.0.1
changelog:
  - Add generated spec file and Oracle build env (Mark Haywood) [Orabug: 37010432]
  - Reconfigure for Oracle build system (Mark Haywood) [Orabug: 37010432]


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


