# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-262.el10]
changelog:
  - smb: client: Fix use-after-free in cifs_try_adding_channels() (Paulo Alcantara) [RHEL-235460]
  - smb/client: show compress mount option (Paulo Alcantara) [RHEL-235460]
  - netfs: Fix folio_queue ENOMEM in writeback by adding a mempool (Paulo Alcantara) [RHEL-235460]
  - netfs: release readahead folios on iterator preparation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: handle single writeback rolling buffer allocation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: clear PG_private_2 on copy-to-cache append failure (Paulo Alcantara) [RHEL-235460]
  - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-235460]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235460]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235460]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-235460]
  - smb: client: free partially allocated transform folio queue (Paulo Alcantara) [RHEL-235460]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-235460]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-235460]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-235460]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-235460]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235460]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235460]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-235460]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-235460]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-235460]
  - cifs: Remove CIFSSMBSetPathInfoFB() fallback function (Paulo Alcantara) [RHEL-235460]
  - cifs: Fix and improve cifs_is_path_accessible() function (Paulo Alcantara) [RHEL-235460]
  - cifs: Show reason why autodisabling serverino support (Paulo Alcantara) [RHEL-235460]
  - scsi: smartpqi: Update version to 2.1.42-011 (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add new PCI device-ids (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add support for CCISS_BIG_PASSTHRU ioctl (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. (Don Brace) [RHEL-224341]
  - redhat/configs: automotive: disable CONFIG_MD (Jared Kangas) [RHEL-237678]
  - mm/gup: fix GUP-fast fallback for NULL-mapping order-0 folios (Rafael Aquini) [RHEL-231964]
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227851] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227851] {CVE-2026-64370}
  - posix-timers: Expand timer_[re]arm() callbacks with a boolean return value (Waiman Long) [RHEL-227851]
  - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227851]
  - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227851]
  - drm/xe: gate observation streams with perf_allow_cpu() (Michael Petlan) [RHEL-212122]
  - perf/core: out-of-line and export perf_allow_cpu/tracepoint() (Michael Petlan) [RHEL-212122]
  - memfd: deny writeable mappings when implying SEAL_WRITE (CKI Backport Bot) [RHEL-228530] {CVE-2026-63952}
  - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191041] {CVE-2026-53195}
  - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191041] {CVE-2026-53196}
  - drm/panel: Clean up S6E3FC2X01 config dependencies (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Karol Herbst) [RHEL-180328]
  - drm/bridge: dw-hdmi-qp: Provide HDMI Vendor Specific InfoFrame (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: update used tracking kernel-doc (Karol Herbst) [RHEL-180328]
  - drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (Karol Herbst) [RHEL-180328]
  - drm/ttm/tests: add a test to exercise ttm_bo_swapout (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix EAGAIN sign in pf_migration_consume() (Karol Herbst) [RHEL-180328]
  - Revert "drm/nouveau/gsp: add support for GA100" (Karol Herbst) [RHEL-180328]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix MMIO access using PF view instead of VF view during migration (Karol Herbst) [RHEL-180328]
  - drm/i915/display: enable ccs modifiers on dg2 (Karol Herbst) [RHEL-180328]
  - drm/xe/wa: Drop redundant entries for Wa_16021867713 & Wa_14019449301 (Karol Herbst) [RHEL-180328]
  - drm/xe/xe3p_xpc: Drop stale MCR steering TODO comment (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix redundant MQD iterations in GFX v12.1 (Karol Herbst) [RHEL-180328]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Karol Herbst) [RHEL-180328]
  - dma-fence: Silence sparse warning in dma_fence_describe (Karol Herbst) [RHEL-180328]
  - drm/hisilicon/hibmc: add updating link cap in DP detect() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks() (Karol Herbst) [RHEL-180328]
  - Revert "drm/amdgpu: Init mcm_addr look up table" (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: fix kernel-doc warning for ras_eeprom_append() (Karol Herbst) [RHEL-180328]
  - drm/xe/xe_pagefault: Disallow writes to read-only VMAs (Karol Herbst) [RHEL-180328]
  - Revert "i915: don't use a vma that didn't match the context VM" (Karol Herbst) [RHEL-180328]
  - drm/drm_atomic: duplicate colorop states if plane color pipeline in use (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix kernel-doc warning for smu_msg_v1_send_msg() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix kernel-doc warning for amdgpu_ttm_alloc_mmio_remap_bo() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: remove gart_window_lock usage from gmc v12_1 (Karol Herbst) [RHEL-180328]
  - drm/sched: Remove racy hack from drm_sched_fini() (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Karol Herbst) [RHEL-180328]
  - drm/nouveau/gsp: add support for GA100 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Karol Herbst) [RHEL-180328]
  - drm/xe: Clear pending_disable before signaling suspend fence (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Karol Herbst) [RHEL-180328]
  - drm/xe/display: fix oops in suspend/shutdown without display (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Karol Herbst) [RHEL-180328]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Karol Herbst) [RHEL-180328]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject DMA commands with uninitialized length (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix arithmetic issues in dma_length() (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Karol Herbst) [RHEL-180328]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds checks for firmware log indices (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds check for firmware runtime memory (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Karol Herbst) [RHEL-180328]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Karol Herbst) [RHEL-180328]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Karol Herbst) [RHEL-180328]
  - drm/atomic: track individual colorop updates (Karol Herbst) [RHEL-180328]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Karol Herbst) [RHEL-180328]
  - drm/colorop: Remove read-only comments from interpolation fields (Karol Herbst) [RHEL-180328]
  - drm/virtio: Fix driver removal with disabled KMS (Karol Herbst) [RHEL-180328]
  - drm/i915/edp: Check supported link rates DPCD read (Karol Herbst) [RHEL-180328]
  - drm/hyperv: During panic do VMBus unload after frame buffer is flushed (Karol Herbst) [RHEL-180328]
  - Drivers: hv: vmbus: Provide option to skip VMBus unload on panic (Karol Herbst) [RHEL-180328]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Karol Herbst) [RHEL-180328]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Karol Herbst) [RHEL-180328]
  - drm/gem: fix race between change_handle and handle_delete (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate VMBus packet size in receive callback (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Read Intel DPCD workaround register (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Karol Herbst) [RHEL-180328]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Karol Herbst) [RHEL-180328]
  - drm/i915/aux: use polling when irqs are unavailable (Karol Herbst) [RHEL-180328]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Karol Herbst) [RHEL-180328]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Karol Herbst) [RHEL-180328]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix CFI failure in debugfs access (Karol Herbst) [RHEL-180328]
  - drm/xe/vf: Fix signature of print functions (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Karol Herbst) [RHEL-180328]
  - drm/gem: Make the GEM LRU lock part of drm_device (Karol Herbst) [RHEL-180328]
  - accel/qaic: Add overflow check to remap_pfn_range during mmap (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Karol Herbst) [RHEL-180328]
  - drm/bridge: megachips: remove bridge when irq request fails (Karol Herbst) [RHEL-180328]
  - drm/bridge: it66121: acquire reset GPIO in probe (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: Fix secondary queue error case (Karol Herbst) [RHEL-180328]
  - drm/virtio: use uninterruptible resv lock for plane updates (Karol Herbst) [RHEL-180328]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Karol Herbst) [RHEL-180328]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Karol Herbst) [RHEL-180328]
  - drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-180328]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Karol Herbst) [RHEL-180328]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Karol Herbst) [RHEL-180328]
  - drm: Replace old pointer to new idr (Karol Herbst) [RHEL-180328]
  - drm/loongson: Use managed KMS polling (Karol Herbst) [RHEL-180328]
  - drm/xe/xelp: Fix Wa_18022495364 (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Karol Herbst) [RHEL-180328]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Karol Herbst) [RHEL-180328]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Karol Herbst) [RHEL-180328]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Karol Herbst) [RHEL-180328]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow embedded connectors without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Karol Herbst) [RHEL-180328]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Karol Herbst) [RHEL-180328]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Karol Herbst) [RHEL-180328]
  - drm/i915/wm: Verify the correct plane DDB entry (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Karol Herbst) [RHEL-180328]
  - drm/fb-helper: Fix a locking bug in an error path (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Karol Herbst) [RHEL-180328]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Karol Herbst) [RHEL-180328]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Karol Herbst) [RHEL-180328]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add default case in DVI mode validation (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Update queue properties for metadata ring (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Fix xgmi max speed reporting (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix type size of remainder argument (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Removed commented line for MQD queue priority (Karol Herbst) [RHEL-180328]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Karol Herbst) [RHEL-180328]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Karol Herbst) [RHEL-180328]
  - dma-fence: Fix sparse warnings due __rcu annotations (Karol Herbst) [RHEL-180328]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Karol Herbst) [RHEL-180328]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Karol Herbst) [RHEL-180328]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Karol Herbst) [RHEL-180328]
  - drm/radeon: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm: Set old handle to NULL before prime swap in change_handle (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-180328]
  - drm/udl: Increase GET_URB_TIMEOUT (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Karol Herbst) [RHEL-180328]
  - drm/appletbdrm: Use kvzalloc for big allocations (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce: Prevent partial address patches (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Karol Herbst) [RHEL-180328]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Karol Herbst) [RHEL-180328]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Karol Herbst) [RHEL-180328]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Karol Herbst) [RHEL-180328]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Karol Herbst) [RHEL-180328]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Add affected colorops with affected planes (Karol Herbst) [RHEL-180328]
  - drm/colorop: Preserve bypass value in duplicate_state() (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Karol Herbst) [RHEL-180328]
  - drm/imagination: Fix segfault when updating ftrace mask (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Karol Herbst) [RHEL-180328]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Karol Herbst) [RHEL-180328]
  - drm/arcpgu: fix device node leak (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: replace PASID IDR with XArray (Karol Herbst) [RHEL-180328]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CKI Backport Bot) [RHEL-178409] {CVE-2026-43501}
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (CKI Backport Bot) [RHEL-174787] {CVE-2026-43341}
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172518] {CVE-2026-31786}
  - Revert "ext4: switch to using the crc32c library" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove redundant function ext4_has_metadata_csum" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sbi argument from ext4_chksum()" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sb argument from ext4_superblock_csum()" (Brian Foster) [RHEL-159116]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-263.el10]
changelog:
  - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Gavin Shan) [RHEL-224504]
  - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231823] {CVE-2026-53062}
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226716] {CVE-2026-43493}
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231458] {CVE-2026-64277}
  - iommu/vt-d: Avoid WARNING in sva unbind path (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add invalidation entry_num and entry_len boundary tests (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Cover invalid read counts on vEVENTQ FD (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add boundary tests for veventq_depth (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set upper bounds on cache invalidation entry_num and entry_len (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Clarify IOAS_MAP_FILE dma-buf support (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Destroy the pages content after detaching from dmabuf (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Break the loop on failure in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set veventq_depth upper bound (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Move vevent memory allocation outside spinlock (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Fix the end_index calculation in __map_range_leaf() (Jerry Snitselaar) [RHEL-213791]
  - iommu: Handle unmap error when iommu_debug is enabled (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64152}
  - iommu: Fix up map/unmap debugging for iommupt domains (Jerry Snitselaar) [RHEL-213791]
  - iommu: Fix loss of errno on map failure for classic ops (Jerry Snitselaar) [RHEL-213791]
  - iommu: Ensure .iotlb_sync is called correctly (Jerry Snitselaar) [RHEL-213791]
  - iommu: Do not call drivers for empty gathers (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64151}
  - iommu/vt-d: Restore IOMMU_CAP_CACHE_COHERENCY (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Always allow DMA-FQ when iommupt provides the iommu_domain (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Avoid rewalking during map (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Directly call iommupt's unmap_range() (Jerry Snitselaar) [RHEL-213791]
  - iommu/iova: Add NULL check in iova_magazine_free() (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Optimize the gather processing for DMA-FQ mode (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64186}
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix illegal device-id access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - of: reserved_mem: Allow reserved_mem framework detect "cma=" kernel param (Jerry Snitselaar) [RHEL-213791]
  - iommu: Avoid copying the user array twice in the full-array copy helper (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Do not try to iommu_map a 0 length region in swiotlb (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53164}
  - iommu/vt-d: Fix RB-tree corruption in probe error path (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix data_len byte-count vs element-count mismatch (Jerry Snitselaar) [RHEL-213791]
  - drm/tegra: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - gpu: host1x: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix premature break in init_iommu_one() (Jerry Snitselaar) [RHEL-213791]
  - iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53283}
  - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (Jerry Snitselaar) [RHEL-213791]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path (Jerry Snitselaar) [RHEL-213791]
  - dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: move dma_map_resource() sanity check into debug code (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64149}
  - iommu/amd: Fix precedence order in set_dte_passthrough() (Jerry Snitselaar) [RHEL-213791]
  - iommu/pages: Fix iommu_pages_flush_incoherent() for non-x86 (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix a race with concurrent allocation and unmap (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix clone_alias() to use the original device's devid (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53053}
  - iommu/vt-d: Block PASID attachment to nested domain with dirty tracking (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53372}
  - iommufd: Fix return value of iommufd_fault_fops_write() (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Block identity domain when SNP enabled (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Only handle IOPF for SVA when PRI is supported (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (Jerry Snitselaar) [RHEL-213791]
  - iommufd: vfio compatibility extension check for noiommu mode (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent (Jerry Snitselaar) [RHEL-213791]
  - x86/sev: Fix broken SNP support with KVM module built-in (Jerry Snitselaar) [RHEL-213791]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (Jerry Snitselaar) [RHEL-213791]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-213791]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Jerry Snitselaar) [RHEL-213791]
  - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210962] {CVE-2025-21834}
  - perf/x86/intel: Enable auto counter reload for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Disable PMI for self-reloaded ACR events (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Always reprogram ACR events to prevent stale masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Improve validation and configuration of ACR masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Fix OMR snoop information parsing issues (Michael Petlan) [RHEL-117335]
  - perf/x86/intel/uncore: Remove extra double quote mark (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Fix die ID init and look up bugs (Michael Petlan) [RHEL-115124] {CVE-2026-43079}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Michael Petlan) [RHEL-115124] {CVE-2026-43344}
  - perf/x86/intel/uncore: Fix iounmap() leak on global_init failure (Michael Petlan) [RHEL-115124]
  - perf/x86/intel: Add support for rdpmc user disable feature (Michael Petlan) [RHEL-117335]
  - perf/x86: Use macros to replace magic numbers in attr_rdpmc (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for Novalake (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in NVL (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Support the 4 new OMR MSRs introduced in DMR and NVL (Michael Petlan) [RHEL-115120 RHEL-117335]
  - perf/x86/intel/uncore: Convert comma to semicolon (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add Nova Lake support (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add missing PMON units for Panther Lake (Michael Petlan) [RHEL-117337]
  - perf pmu: Relax uncore wildcard matching to allow numeric suffix (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Update DMR uncore constraints preliminarily (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support uncore constraint ranges (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support IIO free-running counters on DMR (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add freerunning event descriptor helper macro (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add domain global init callback (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add CBB PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add IMH PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Remove has_generic_discovery_table() (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support per-platform discovery base devices (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Move uncore discovery init struct to header (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/cstate: Add Diamond Rapids support (Michael Petlan) [RHEL-115122]
  - perf/x86/intel/cstate: Add Nova Lake support (Michael Petlan) [RHEL-120357]
  - perf/x86/intel/cstate: Add Wildcat Lake support (Michael Petlan) [RHEL-95668]
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188220] {CVE-2026-52923}
  - KVM: arm64: account pKVM reclaim against the VM mm (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Set IL in fake ESR for pKVM memory sharing exit (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Initialize parser_state before pgtable walk (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Expose shadow page tables in debugfs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Make KVM ptdump code s2 mmu aware (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore S1PIE register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore TCR2_EL1 register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - drivers/virt: pkvm: Add Kconfig dependency on DMA_RESTRICTED_POOL (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename PKVM_PAGE_STATE_MASK (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest hvcs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover forced reclaim (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Register 'selftest_vm' in the VM table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest donation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add some initial documentation for pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Allow userspace to create protected VMs when pKVM is enabled (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_UNSHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_SHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add hvc handler at EL2 for hypercalls from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Return -EFAULT from VCPU_RUN on access to a poisoned pte (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reclaim faulting page from pKVM in spurious fault handler (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce hypercall to force reclaim of a protected page (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fully update VNCR fixmap state in kvm_translate_vncr() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Inject SEA TTW when desc update can't write to GPA (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Restart stage-1 walk if stage-2 desc update fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't pass host_debug_state to BRBE world-switch routines (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest donate (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest share (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make EL2 exception entry and exit context-synchronization events (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Annotate guest donations with handle and gfn in host stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Change 'pkvm_handle_t' to u16 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce host_stage2_set_owner_metadata_locked() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Generalise kvm_pgtable_stage2_set_owner() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid pointless annotation when mapping host-owned pages (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Inject SIGSEGV on illegal accesses (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Support translation faults in inject_host_exception() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Factor out pKVM host exception injection logic (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up reclaim hypercall to pkvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_reclaim_dying_guest_page() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't advertise unsupported features for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix block mapping validity check in stage-1 walker (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Roll back partial shares on kvm_share_hyp() failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid host/hyp share desync on unshare hypercall failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Free hyp-share tracking node when share hypercall fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Flush HCR_EL2.VSE to deliver SErrors to pKVM guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly identify executable PTEs at stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restore POR_EL0 access to host EL0 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restart instruction upon race in __kvm_at_s12() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wire AT S1E1A in the system instruction handling table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Key CPTR_EL2.E0POE propagation on FEAT_S1POE (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: PMU: Preserve AArch32 counter low bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __pkvm_init_vm error path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reset page order in pKVM hyp_pool (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Free private_irqs when init fails after allocation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __deactivate_fgt macro parameter typo (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Guard against NULL vcpu on VHE hyp panic path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle permission faults with guest_memfd (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle aborts from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_host_donate_guest() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove unused PKVM_ID_FFA definition (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove is_protected_kvm_enabled() checks from hypercalls (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Expose self-hosted debug regs as RAZ/WI for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up donation hypercall to pkvm_pgtable_stage2_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Split teardown hypercall into two phases (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename __pkvm_pgtable_stage2_unmap() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move handle check into pkvm_pgtable_stage2_destroy_range() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore -EAGAIN when mapping in pages for the pKVM host (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Prevent unsupported memslot operations on protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore MMU notifier callbacks for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Convert gmem_abort() to struct kvm_s2_fault_desc (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify integration of adjust_nested_*_perms() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Directly expose mapping prot and kill kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move device mapping management into kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace force_pte with a max_map_size attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move kvm_s2_fault.{pfn,page} to kvm_s2_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restrict the scope of the 'writable' attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill logging_active from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move VMA-related information to kvm_s2_fault_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill topup_memcache from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill exec_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill write_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Constrain fault_granule to kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace fault_is_perm with a helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move fault context to const structure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make fault_ipa immutable (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill fault->ipa (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clean up control flow in kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hoist MTE validation check out of MMU lock path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Optimize early exit checks in kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Initialize struct kvm_s2_fault completely at declaration (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify return logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove redundant state variables from struct kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify nested VMA shift calculation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract page table mapping in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract stage-2 permission logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Isolate mmap_read_lock inside new kvm_s2_fault_get_vma_info() helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract PFN resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce struct kvm_s2_fault to user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract VMA size resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix typo in feature check comments (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak stage-2 page-table if VM fails to init under pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable SPE Profiling Buffer when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable TRBE Trace Buffer Unit when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Read PMUVer as unsigned (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Use pmuv3_implemented() function (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned (Sebastian Ott) [RHEL-180320]
  - selftests/cgroup: include slab in test_percpu_basic memory check (Waiman Long) [RHEL-154159]
  - selftests/cgroup: fix hardcoded page size in test_percpu_basic (Waiman Long) [RHEL-154159]
  - selftests/cgroup: test_zswap: wait for asynchronous writeback (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap attempt_writeback() on 64K pagesize system (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap test_no_invasive_cgroup_shrink on large pagesize system (Waiman Long) [RHEL-154157]
  - selftests/cgroup: replace hardcoded page size values in test_zswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: rename PAGE_SIZE to BUF_SIZE in cgroup_util (Waiman Long) [RHEL-154157]
  - selftests/cgroup: use runtime page size for zswpin check (Waiman Long) [RHEL-154157]
  - selftests/cgroup: avoid OOM in test_swapin_nozswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: skip test_zswap if zswap is globally disabled (Waiman Long) [RHEL-154157]
  - selftests/cgroup: Fix error path leaks in test_percpu_basic (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix string comparison in write_test (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix cg_read_strcmp() empty string comparison (Waiman Long) [RHEL-184801]
  - selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long) [RHEL-184801]
  - selftests: cgroup: make test_memcg_sock robust against delayed sock stats (Waiman Long) [RHEL-184801]
  - selftests: cgroup: Add cg_read_key_long_poll() to poll a cgroup key with retries (Waiman Long) [RHEL-184801]
  - selftests: complete kselftest include centralization (Waiman Long) [RHEL-184801]
  - selftests/cgroup: conform test to KTAP format output (Waiman Long) [RHEL-184801]
  - selftests: memcg: increase error tolerance of child memory.current check in test_memcg_protection() (Waiman Long) [RHEL-184801]
  - selftests: memcg: allow low event with no memory.low and memory_recursiveprot on (Waiman Long) [RHEL-184801]
  - selftests/cgroup: use bash in test_cpuset_v1_hp.sh (Waiman Long) [RHEL-184801]
  - ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Antoine Tenart) [RHEL-152712]
  - ipv6: mcast: Fix use-after-free when processing MLD queries (Antoine Tenart) [RHEL-152712]
  - ipv6: anycast: insert aca into global hash under idev->lock (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in fib6_select_path() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in rt6_fill_node() (Antoine Tenart) [RHEL-152712]
  - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-152712]
  - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: refresh hdr pointer before ioam6_event() (Antoine Tenart) [RHEL-152712]
  - ipv6: route: Unregister netdevice notifier on BPF init failure (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Antoine Tenart) [RHEL-152712]
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Antoine Tenart) [RHEL-152712]
  - ipv6: fix potential UAF caused by ip6_forward_proxy_check() (Antoine Tenart) [RHEL-152712]
  - ipv6: Fix null-ptr-deref in fib6_mtu(). (Antoine Tenart) [RHEL-152712]
  - ipv6: update route serial number on NETDEV_CHANGE (Antoine Tenart) [RHEL-152712]
  - ipv6: Implement limits on extension header parsing (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible UAF in icmpv6_rcv() (Antoine Tenart) [RHEL-152712]
  - net: ioam6: fix OOB and missing lock (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712]
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix data race in fib6_metric_set() using cmpxchg (Antoine Tenart) [RHEL-152712]
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Antoine Tenart) [RHEL-152712]
  - ipv6: prevent possible UaF in addrconf_permanent_addr() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Antoine Tenart) [RHEL-152712]
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Antoine Tenart) [RHEL-152712]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix a race in ip6_sock_set_v6only() (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712] {CVE-2026-43186}
  - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF (Antoine Tenart) [RHEL-152712]
  - ipv6: use the right ifindex when replying to icmpv6 from localhost (Antoine Tenart) [RHEL-152712]
  - ipv6: annotate data-race in ndisc_router_discovery() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Antoine Tenart) [RHEL-152712]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-264.el10]
changelog:
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add test cases for link and peer netns (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add python context manager for netns entering (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Create link directly in target net namespace (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Remove "net" from newlink params (Guillaume Nault) [RHEL-144808]
  - net: xfrm: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Init tunnel link-netns before registering dev (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Don't set tunnel->net in ip_tunnel_init() (Guillaume Nault) [RHEL-144808]
  - ieee802154: 6lowpan: Validate link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: Use link/peer netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Pack newlink() params into struct (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Lookup device in target netns when creating link (Guillaume Nault) [RHEL-144808]
  - accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: fix missing newline in pr_err message (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix runtime suspend deadlock when there is pending job (Peter Colberg) [RHEL-222546] {CVE-2026-43446}
  - accel/amdxdna: Split mailbox channel create function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix major version check on NPU1 platform (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix NULL pointer dereference of mgmt_chann (Peter Colberg) [RHEL-222546] {CVE-2026-23328}
  - accel/amdxdna: Fill invalid payload for failed command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use a different name for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Validate command buffer payload count (Peter Colberg) [RHEL-222546] {CVE-2026-23424}
  - accel/amdxdna: Prevent ubuf size overflow (Peter Colberg) [RHEL-222546] {CVE-2026-23280}
  - accel/amdxdna: Fix out-of-bounds memset in command slot handling (Peter Colberg) [RHEL-222546] {CVE-2026-23288}
  - accel/amdxdna: Fix command hang on suspended hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix suspend failure after enabling turbo mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dead lock for suspend and resume (Peter Colberg) [RHEL-222546] {CVE-2026-23295}
  - accel/amdxdna: Reduce log noise during process termination (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix crash when destroying a suspended hardware context (Peter Colberg) [RHEL-222546] {CVE-2026-23341}
  - accel/amdxdna: Switch to always use chained command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove buffer size check when creating command BO (Peter Colberg) [RHEL-222546]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Move RPM resume into job run function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect DPM level after suspend/resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect error code returned for failed chain command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove hardware context status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (Peter Colberg) [RHEL-222546] {CVE-2026-45908}
  - accel/amdxdna: Stop job scheduling across aie2_release_resource() (Peter Colberg) [RHEL-222546] {CVE-2026-45980}
  - accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (Peter Colberg) [RHEL-222546] {CVE-2026-45931}
  - accel/amdxdna: Fix notifier_wq flushing warning (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update firmware version check for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update message DMA buffer allocation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable hardware context priority (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable temporal sharing only mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove NPU2 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove amdxdna_flush() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix potential NULL pointer dereference in context cleanup (Peter Colberg) [RHEL-222546] {CVE-2025-71308}
  - accel/amdxdna: Fix race where send ring appears full due to delayed head update (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix cu_idx being cleared by memset() during command setup (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix race condition when checking rpm_on (Peter Colberg) [RHEL-222546] {CVE-2025-71303}
  - accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Poll MPNPU_PWAITMODE after requesting firmware suspend (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Block running under a hypervisor (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix deadlock between context destroy and job timeout (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Clear mailbox interrupt register during channel creation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Treat power-off failure as unrecoverable error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dma_fence leak when job is canceled (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support preemption requests (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for telemetry data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for resource data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware specific attributes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use MSG_OP_CHAIN_EXEC_NPU when supported (Peter Colberg) [RHEL-222546]
  - drm: include drm_print.h where needed (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect command state for timed out job (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix uninitialized return value (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect return value in aie2_hwctx_sync_debug_bo() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support firmware debug buffer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support getting last hardware error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Resume power for creating and destroying hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance runtime power management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Call dma_buf_vmap_unlocked() for imported object (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Peter Colberg) [RHEL-222546] {CVE-2025-68731}
  - accel/amdxdna: Add ioctl DRM_IOCTL_AMDXDNA_GET_ARRAY (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use int instead of u32 to store error codes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect type used for a local variable (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a function to walk hardware contexts (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Unify pm and rpm suspend and resume callbacks (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Delete pci_free_irq_vectors() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support user space allocated buffer (Peter Colberg) [RHEL-222546]
  - drm/sched: Rename DRM_GPU_SCHED_STAT_NOMINAL to DRM_GPU_SCHED_STAT_RESET (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Revise device bo creation and free (Peter Colberg) [RHEL-222546]
  - drm/sched: Store the drm client_id in drm_sched_fence (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect PSP firmware size (Peter Colberg) [RHEL-222546]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support submit commands without arguments (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect size of ERT_START_NPU commands (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add BO import and export (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: s/drm_gem_v[un]map_unlocked/drm_gem_v[un]map/ (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Check interrupt register before mailbox_rx_worker exits (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add missing include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add MODULE_FIRMWARE() declarations (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Refactor hardware context destroy routine (Peter Colberg) [RHEL-222546]
  - drm/sched: Use struct for drm_sched_init() params (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare sched_ops as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove casting mailbox payload pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Return error when setting clock failed for npu1 (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu6_dev_priv as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add __user to second parameter of aie2_query_status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare force_cmdlist as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use rcu_access_pointer for __rcu pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare aie2_max_col as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare mailbox register base as __iomem pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu device profile as static variables (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add zero check for pad in ioctl input structures (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Read firmware interface version from registers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance power management settings (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace idr api with xarray (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add RyzenAI-npu6 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: use modern PM helpers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add include interrupt.h to amdxdna_mailbox.c (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query firmware version (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace mmput with mmput_async to avoid dead lock (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add device status for aie2 devices (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query functions (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add error handling (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add suspend and resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add command execution (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add GEM buffer object management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware resource solver (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support hardware mailbox (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a new driver for AMD AI Engine (Peter Colberg) [RHEL-222546]
  - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190192]
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190192] {CVE-2026-53246}
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234289] {CVE-2026-64564}
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230267] {CVE-2026-64276}
  - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214458]
  - redhat/configs: re-enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186753]
  - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-137943]
  - rh_message.h: Disable ConnectX-10 NVLink-C2C device (Benjamin Poirier) [RHEL-211847]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192401] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186699] {CVE-2026-46113}
  - tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183180]
  - firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Defer probe until pKVM is initialized (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Set the core device as FF-A device parent (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Register core as a platform driver (Jennifer Berringer) [RHEL-179031]
  - Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179031]
  - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188204] {CVE-2026-52924}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171511] {CVE-2026-31669}
  - net: add prefetch() in skb_defer_free_flush() (Antoine Tenart) [RHEL-123212]
  - net: add NUMA awareness to skb_attempt_defer_free() (Antoine Tenart) [RHEL-123212]
  - net: use llist for sd->defer_list (Antoine Tenart) [RHEL-123212]
  - net: make softnet_data.defer_count an atomic (Antoine Tenart) [RHEL-123212]
  - l2tp: Drop large packets with UDP encap (Guillaume Nault) [RHEL-152732]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152732]
  - l2tp: Fix memleak in l2tp_udp_encap_recv(). (Guillaume Nault) [RHEL-152732]
  - mpls: add missing unregister_netdevice_notifier to mpls_init (Guillaume Nault) [RHEL-152709]
  - ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152724]
  - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: fix instaces typo in comments (CKI Backport Bot) [RHEL-152736]
  - seg6: fix lenghts typo in a comment (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: Add test cases for End.X with link-local nexthop (CKI Backport Bot) [RHEL-152736]
  - seg6: Allow End.X behavior to accept an oif (CKI Backport Bot) [RHEL-152736]
  - seg6: Call seg6_lookup_any_nexthop() from End.X behavior (CKI Backport Bot) [RHEL-152736]
  - seg6: Extend seg6_lookup_any_nexthop() with an oif argument (CKI Backport Bot) [RHEL-152736]


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-11
changelog:
  - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
  - make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-2
changelog:
  - tools: virsh: fix crash on error (RHEL-234911)
  - conf: Include check for pci_bus in virDomainIOMMUDefEquals() (RHEL-138901)
  - qemu: introduce QEMU_CAPS_DEVICE_ARM_SMMUV3 (RHEL-138901)
  - qemu: introduce QEMU_CAPS_ARM_SMMUV3_SMMU_PER_BUS (RHEL-138901)
  - qemu: introduce QEMU_CAPS_ARM_SMMUV3_ACCEL (RHEL-138901)
  - qemu: Add support for HW-accelerated nested SMMUv3 (RHEL-138901)
  - tests: qemuxmlconfdata: provide HW-accel smmuv3 sample XML and CLI args (RHEL-138901)
  - conf: schemas: Allow '.' in schema for CPU flag name (RHEL-222549)
  - tests: capabilityschemadata: Add a real test example (RHEL-222549)
  - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-3
changelog:
  - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242545)
  - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242545)
  - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242545)
  - qemu: Remove 'allowReboot' field (RHEL-242545)
  - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242545)
  - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242545)
  - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242545)
  - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242545)
  - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242545)
  - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242545)
  - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242545)
  - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242545)
  - Add support for keeping VM running when panic notifier is used (RHEL-242545)
  - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-185108)
  - qemu: move qemuAgent*InfoFormatParams to hypervisor/qemu_agent.c (RHEL-235731)
  - Add guest device info to virDomainGetGuestInfo (RHEL-235731)
  - qemu_agent: Introduce guest-get-devices (RHEL-235731)
  - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-235731)
  - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-235731)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-235731)


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-4
changelog:
  - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (CVE-2026-18917, RHEL-245273)


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.89.2-1
changelog:
  - Rebase mingw-glib2 to 2.89.2
  - RHEL-212173 - CVE-2026-58010
  - RHEL-212180 - CVE-2026-58011
  - RHEL-212207 - CVE-2026-58012
  - RHEL-212231 - CVE-2026-58013
  - RHEL-190607 - CVE-2026-58014
  - RHEL-212243 - CVE-2026-58015
  - RHEL-190612 - CVE-2026-58016


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.60.1-1
changelog:
  - Rebase to libguestfs 1.60.1
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.6-1
changelog:
  - Rebase to libnbd 1.25.6
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.7-1
changelog:
  - Rebase to libnbd 1.25.7
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057
  - Fix regression in nbd+ssh URIs caused by preceding change
    resolves: RHEL-217012


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-5
changelog:
  - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213661)
  - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213692)
  - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213717)
  - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213726)


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-6
changelog:
  - Backport remaining PCP security hardening fixes from private-pcp
  - pmieconf and pmlogmv command injection hardening (CWE-78)
  - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195)
  - timezone and zoneinfo string validation
  - pmdaroot peer credential verification (CWE-403)
  - pmproxy REST CERT_REQD enforcement and logger servlet authentication


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Jindrich Novy <jnovy@redhat.com> - 7:6.1.0-2
changelog:
  - Rebuild for Go and security fixes
  - Resolves: RHEL-190079, RHEL-190852, RHEL-241124, RHEL-241361, RHEL-241463, RHEL-241829, RHEL-241930, RHEL-242162


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladislav Dronov <vdronov@redhat.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0 @ 686d209b (RHEL-91079)
  - Add autoconf-archive as a dependency
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code
  - Add sysusers.d config file to allow rpm to create users/groups automatically


author: Vladislav Dronov <vdronov@redhat.com> - 26.02.0-1
changelog:
  - Update to qatlib 26.02.0 @ fe4bb4b6 (RHEL-115466)
  - Add patch to force 32 bit MMIO CSR reads for GCC 16.1


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


